Is @cartridge/penpal safe to use?

@cartridge/penpal has no known vulnerabilities on the latest version (6.2.4). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of @cartridge/penpal?

The latest version of @cartridge/penpal is 6.2.4, released 2025-01-27.

Does @cartridge/penpal have known vulnerabilities?

No known vulnerabilities on the latest version of @cartridge/penpal.

Is @cartridge/penpal deprecated?

No, @cartridge/penpal is actively maintained. Latest release: 6.2.4 (2025-01-27).

What are alternatives to @cartridge/penpal?

Popular alternatives to @cartridge/penpal in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @cartridge/penpal use?

@cartridge/penpal is licensed under MIT.

@cartridge/penpal

npmv6.2.4

A promise-based library for communicating with iframes via postMessage.

License MITpermissive3 versions3 maintainers0 deps3,860 weekly dl

Aaronius/penpal

/ 100

Health

use with caution

@cartridge/[email protected] low health (66/100) — consider alternatives

Moderate health score (66/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

25/25

security

9/15

maturity

6/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

6.2 KBminified

2.5 KB gzipped

0 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@cartridge/penpal