Is @dapr/dapr-dev safe to use?

@dapr/dapr-dev has no known vulnerabilities on the latest version (3.6.1-20250924062712-1d40fb9). DepScope rates its health at 53/100 (high risk).

What is the latest version of @dapr/dapr-dev?

The latest version of @dapr/dapr-dev is 3.6.1-20250924062712-1d40fb9, released 2025-09-24.

Does @dapr/dapr-dev have known vulnerabilities?

No known vulnerabilities on the latest version of @dapr/dapr-dev.

Is @dapr/dapr-dev deprecated?

No, @dapr/dapr-dev is actively maintained. Latest release: 3.6.1-20250924062712-1d40fb9 (2025-09-24).

What are alternatives to @dapr/dapr-dev?

Popular alternatives to @dapr/dapr-dev in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @dapr/dapr-dev use?

@dapr/dapr-dev is licensed under apache-2.0.

@dapr/dapr-dev

npmv3.6.1-20250924062712-1d40fb9

The official Dapr (https://dapr.io) SDK for Node.js

License apache-2.0permissive74 versions2 maintainers10 deps

dapr/js-sdk

/ 100

Health

use with caution

@dapr/[email protected] low health (53/100) — consider alternatives

Moderate health score (53/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

2051.1 KBminified

496.0 KB gzipped

10 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (10)

express node-fetch body-parser @grpc/grpc-js google-protobuf http-terminator @types/node-fetch @dapr/durabletask-js @js-temporal/polyfill @types/google-protobuf

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@dapr/dapr-dev