Is @jsquash/webp safe to use?

@jsquash/webp has no known vulnerabilities on the latest version (1.5.0). DepScope rates its health at 56/100 (high risk).

What is the latest version of @jsquash/webp?

The latest version of @jsquash/webp is 1.5.0, released 2025-05-12.

Does @jsquash/webp have known vulnerabilities?

No known vulnerabilities on the latest version of @jsquash/webp.

Is @jsquash/webp deprecated?

No, @jsquash/webp is actively maintained. Latest release: 1.5.0 (2025-05-12).

What are alternatives to @jsquash/webp?

Popular alternatives to @jsquash/webp in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @jsquash/webp use?

@jsquash/webp is licensed under Apache-2.0.

@jsquash/webp

npmv1.5.0

Wasm webp encoder and decoder supporting the browser. Repackaged from Squoosh App.

License Apache-2.0permissive15 versions1 maintainers1 deps38,972 weekly dl

jamsinclair/jSquash

56

/ 100

Health

use with caution

@jsquash/[email protected] low health (56/100) — consider alternatives

Moderate health score (56/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

0

none known

Bundle & TypeScript

📦

Bundle Size

19.2 KBminified

7.2 KB gzipped

1 direct dependencies

scoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

wasm-feature-detect

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@jsquash/webp