Is @gltf-transform/core safe to use?

@gltf-transform/core has no known vulnerabilities on the latest version (4.3.0). DepScope rates its health at 57/100 (high risk).

What is the latest version of @gltf-transform/core?

The latest version of @gltf-transform/core is 4.3.0, released 2026-01-02.

Does @gltf-transform/core have known vulnerabilities?

No known vulnerabilities on the latest version of @gltf-transform/core.

Is @gltf-transform/core deprecated?

No, @gltf-transform/core is actively maintained. Latest release: 4.3.0 (2026-01-02).

What are alternatives to @gltf-transform/core?

Popular alternatives to @gltf-transform/core in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does @gltf-transform/core use?

@gltf-transform/core is licensed under MIT.

@gltf-transform/core

npmv4.3.0

glTF 2.0 SDK for JavaScript and TypeScript, on Web and Node.js.

License MITpermissive217 versions1 maintainers1 deps

github:donmccurdy/glTF-Transform

/ 100

Health

use with caution

@gltf-transform/[email protected] low health (57/100) — consider alternatives

Moderate health score (57/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

72.8 KBminified

20.5 KB gzipped

1 direct dependencies

ESMscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

property-graph

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@gltf-transform/core