Is @dotcom-tool-kit/base safe to use?

@dotcom-tool-kit/base has no known vulnerabilities on the latest version (2.1.0). DepScope rates its health at 56/100 (high risk).

What is the latest version of @dotcom-tool-kit/base?

The latest version of @dotcom-tool-kit/base is 2.1.0, released 2026-01-15.

Does @dotcom-tool-kit/base have known vulnerabilities?

No known vulnerabilities on the latest version of @dotcom-tool-kit/base.

Is @dotcom-tool-kit/base deprecated?

No, @dotcom-tool-kit/base is actively maintained. Latest release: 2.1.0 (2026-01-15).

What are alternatives to @dotcom-tool-kit/base?

Popular alternatives to @dotcom-tool-kit/base in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does @dotcom-tool-kit/base use?

@dotcom-tool-kit/base is licensed under ISC.

@dotcom-tool-kit/base

npmv2.1.0

License ISCpermissive35 versions3 maintainers6 deps

/ 100

Health

use with caution

@dotcom-tool-kit/[email protected] low health (56/100) — consider alternatives

Moderate health score (56/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

231.2 KBminified

64.4 KB gzipped

6 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (6)

@dotcom-tool-kit/conflict @dotcom-tool-kit/logger @dotcom-tool-kit/telemetry @dotcom-tool-kit/validated semver winston

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@dotcom-tool-kit/base