Is @semantic-release/commit-analyzer safe to use?

@semantic-release/commit-analyzer has no known vulnerabilities on the latest version (13.0.1). DepScope rates its health at 68/100 (moderate risk).

What is the latest version of @semantic-release/commit-analyzer?

The latest version of @semantic-release/commit-analyzer is 13.0.1, released 2025-01-03.

No known vulnerabilities on the latest version of @semantic-release/commit-analyzer.

No, @semantic-release/commit-analyzer is actively maintained. Latest release: 13.0.1 (2025-01-03).

Popular alternatives to @semantic-release/commit-analyzer in npm include: semver, minimatch, ansi-styles, brace-expansion, strip-ansi.

@semantic-release/commit-analyzer is licensed under MIT.

npmv13.0.1

semantic-release plugin to analyze commits with conventional-changelog

License MITpermissive61 versions4 maintainers8 deps2,509,631 weekly dl

/ 100

Health

safe to use

@semantic-release/[email protected] is safe to use (health: 68/100)

Health breakdown0 – 100

5/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

6/15

community

Vulnerabilities

none known

🌟

0/10untyped

No type definitions available

Quality signals

Publish security

npm signed

Dependencies (8)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@semantic-release/commit-analyzer