Is @backstage/backend-plugin-api safe to use?

@backstage/backend-plugin-api has no known vulnerabilities on the latest version (1.9.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of @backstage/backend-plugin-api?

The latest version of @backstage/backend-plugin-api is 1.9.0, released 2026-04-14.

Does @backstage/backend-plugin-api have known vulnerabilities?

No known vulnerabilities on the latest version of @backstage/backend-plugin-api.

Is @backstage/backend-plugin-api deprecated?

No, @backstage/backend-plugin-api is actively maintained. Latest release: 1.9.0 (2026-04-14).

What are alternatives to @backstage/backend-plugin-api?

Popular alternatives to @backstage/backend-plugin-api in npm include: semver, minimatch, ansi-styles, brace-expansion, strip-ansi.

What license does @backstage/backend-plugin-api use?

@backstage/backend-plugin-api is licensed under Apache-2.0.

@backstage/backend-plugin-api

npmv1.9.0

Core API used by Backstage backend plugins

License Apache-2.0permissive1310 versions3 maintainers14 deps

backstage/backstage

/ 100

Health

safe to use

@backstage/[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

578.7 KBminified

178.9 KB gzipped

14 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (14)

zod knex luxon json-schema @types/luxon @types/express @backstage/types @backstage/config @backstage/errors @types/json-schema @backstage/cli-common @backstage/plugin-auth-node @backstage/plugin-permission-node @backstage/plugin-permission-common

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@backstage/backend-plugin-api