Is @firebase/firestore safe to use?

@firebase/firestore has no known vulnerabilities on the latest version (4.14.0). DepScope rates its health at 92/100 (low risk).

What is the latest version of @firebase/firestore?

The latest version of @firebase/firestore is 4.14.0, released 2026-04-09.

Does @firebase/firestore have known vulnerabilities?

No known vulnerabilities on the latest version of @firebase/firestore.

Is @firebase/firestore deprecated?

No, @firebase/firestore is actively maintained. Latest release: 4.14.0 (2026-04-09).

What are alternatives to @firebase/firestore?

Popular alternatives to @firebase/firestore in npm include: ansi-styles, debug, brace-expansion, strip-ansi, ms.

What license does @firebase/firestore use?

@firebase/firestore is licensed under Apache-2.0.

@firebase/firestore

npmv4.14.0

The Cloud Firestore component of the Firebase JS SDK.

License Apache-2.0permissive3957 versions4 maintainers7 deps7,008,296 weekly dl

firebase/firebase-js-sdk

/ 100

Health

safe to use

@firebase/[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

10/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

340.6 KBminified

103.1 KB gzipped

7 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (7)

@firebase/component @firebase/logger @firebase/util @firebase/webchannel-wrapper @grpc/grpc-js @grpc/proto-loader tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@firebase/firestore