Is @circleci/circleci-config-sdk safe to use?

@circleci/circleci-config-sdk has no known vulnerabilities on the latest version (0.12.5). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of @circleci/circleci-config-sdk?

The latest version of @circleci/circleci-config-sdk is 0.12.5, released 2025-05-28.

Does @circleci/circleci-config-sdk have known vulnerabilities?

No known vulnerabilities on the latest version of @circleci/circleci-config-sdk.

Is @circleci/circleci-config-sdk deprecated?

No, @circleci/circleci-config-sdk is actively maintained. Latest release: 0.12.5 (2025-05-28).

What are alternatives to @circleci/circleci-config-sdk?

Popular alternatives to @circleci/circleci-config-sdk in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @circleci/circleci-config-sdk use?

@circleci/circleci-config-sdk is licensed under MIT.

@circleci/circleci-config-sdk

npmv0.12.5

An SDK for building CircleCI Configuration files with JavaScript.

License MITpermissive62 versions5 maintainers2 deps65,827 weekly dl

CircleCI-Public/circleci-config-sdk-ts

/ 100

Health

use with caution

@circleci/[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

145.9 KBminified

40.2 KB gzipped

2 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

browser-or-node yaml

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@circleci/circleci-config-sdk