Is @firebase/messaging safe to use?

@firebase/messaging has no known vulnerabilities on the latest version (0.12.25). DepScope rates its health at 87/100 (low risk).

What is the latest version of @firebase/messaging?

The latest version of @firebase/messaging is 0.12.25, released 2026-03-19.

Does @firebase/messaging have known vulnerabilities?

No known vulnerabilities on the latest version of @firebase/messaging.

Is @firebase/messaging deprecated?

No, @firebase/messaging is actively maintained. Latest release: 0.12.25 (2026-03-19).

What are alternatives to @firebase/messaging?

Popular alternatives to @firebase/messaging in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @firebase/messaging use?

@firebase/messaging is licensed under Apache-2.0.

@firebase/messaging

npmv0.12.25

This is the Firebase Cloud Messaging component of the Firebase JS SDK.

License Apache-2.0permissive3665 versions4 maintainers6 deps6,186,789 weekly dl

firebase/firebase-js-sdk

/ 100

Health

safe to use

@firebase/[email protected] is safe to use (health: 87/100)

Health breakdown0 – 100

20/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

10/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

23.7 KBminified

7.8 KB gzipped

6 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (6)

idb tslib @firebase/util @firebase/component @firebase/installations @firebase/messaging-interop-types

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@firebase/messaging