Is @japa/runner safe to use?

@japa/runner has no known vulnerabilities on the latest version (5.3.0). DepScope rates its health at 59/100 (high risk).

What is the latest version of @japa/runner?

The latest version of @japa/runner is 5.3.0, released 2026-01-17.

Does @japa/runner have known vulnerabilities?

No known vulnerabilities on the latest version of @japa/runner.

Is @japa/runner deprecated?

No, @japa/runner is actively maintained. Latest release: 5.3.0 (2026-01-17).

What are alternatives to @japa/runner?

Popular alternatives to @japa/runner in npm include: semver, ansi-styles, strip-ansi, ms, lru-cache.

What license does @japa/runner use?

@japa/runner is licensed under MIT.

@japa/runner

npmv5.3.0

A simple yet powerful testing framework for Node.js

License MITpermissive61 versions3 maintainers11 deps

japa/runner

/ 100

Health

safe to use

@japa/[email protected] is safe to use (health: 59/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

35.4 KBminified

12.1 KB gzipped

11 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (11)

@japa/core @japa/errors-printer @poppinss/colors @poppinss/hooks @poppinss/string @poppinss/utils error-stack-parser-es find-cache-directory getopts supports-color timekeeper

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@japa/runner