Is @dotcom-tool-kit/package-json-hook safe to use?

@dotcom-tool-kit/package-json-hook has no known vulnerabilities on the latest version (6.0.1). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of @dotcom-tool-kit/package-json-hook?

The latest version of @dotcom-tool-kit/package-json-hook is 6.0.1, released 2026-01-15.

Does @dotcom-tool-kit/package-json-hook have known vulnerabilities?

No known vulnerabilities on the latest version of @dotcom-tool-kit/package-json-hook.

Is @dotcom-tool-kit/package-json-hook deprecated?

No, @dotcom-tool-kit/package-json-hook is actively maintained. Latest release: 6.0.1 (2026-01-15).

What are alternatives to @dotcom-tool-kit/package-json-hook?

Popular alternatives to @dotcom-tool-kit/package-json-hook in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does @dotcom-tool-kit/package-json-hook use?

@dotcom-tool-kit/package-json-hook is licensed under ISC.

@dotcom-tool-kit/package-json-hook

npmv6.0.1

This plugin manages Tool Kit commands that are run from npm scripts, via a Tool Kit [`Hook`](#hooks) that automatically manages `package.json`.

License ISCpermissive132 versions3 maintainers7 deps672 weekly dl

financial-times/dotcom-tool-kit

/ 100

Health

use with caution

@dotcom-tool-kit/[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (7)

@dotcom-tool-kit/base @dotcom-tool-kit/conflict @dotcom-tool-kit/plugin @financial-times/package-json lodash tslib zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@dotcom-tool-kit/package-json-hook