Is @bpmn-io/extract-process-variables safe to use?

@bpmn-io/extract-process-variables has no known vulnerabilities on the latest version (2.2.1). DepScope rates its health at 72/100 (moderate risk).

What is the latest version of @bpmn-io/extract-process-variables?

The latest version of @bpmn-io/extract-process-variables is 2.2.1, released 2026-02-27.

Does @bpmn-io/extract-process-variables have known vulnerabilities?

No known vulnerabilities on the latest version of @bpmn-io/extract-process-variables.

Is @bpmn-io/extract-process-variables deprecated?

No, @bpmn-io/extract-process-variables is actively maintained. Latest release: 2.2.1 (2026-02-27).

What are alternatives to @bpmn-io/extract-process-variables?

Popular alternatives to @bpmn-io/extract-process-variables in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @bpmn-io/extract-process-variables use?

@bpmn-io/extract-process-variables is licensed under MIT.

@bpmn-io/extract-process-variables

npmv2.2.1

A util for bpmn-js to extract Camunda BPM process variables from a BPMN 2.0 diagram.

License MITpermissive26 versions12 maintainers1 deps42,872 weekly dl

bpmn-io/extract-process-variables

/ 100

Health

safe to use

@bpmn-io/[email protected] is safe to use (health: 72/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

3.6 KBminified

1.3 KB gzipped

1 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

min-dash

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@bpmn-io/extract-process-variables