Is @semantic-release/commit-analyzer safe to use?

@semantic-release/commit-analyzer has no known vulnerabilities on the latest version (13.0.1). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of @semantic-release/commit-analyzer?

The latest version of @semantic-release/commit-analyzer is 13.0.1, released 2025-01-03.

Does @semantic-release/commit-analyzer have known vulnerabilities?

No known vulnerabilities on the latest version of @semantic-release/commit-analyzer.

Is @semantic-release/commit-analyzer deprecated?

No, @semantic-release/commit-analyzer is actively maintained. Latest release: 13.0.1 (2025-01-03).

What are alternatives to @semantic-release/commit-analyzer?

Popular alternatives to @semantic-release/commit-analyzer in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @semantic-release/commit-analyzer use?

@semantic-release/commit-analyzer is licensed under MIT.

@semantic-release/commit-analyzer

npmv13.0.1

semantic-release plugin to analyze commits with conventional-changelog

License MITpermissive61 versions4 maintainers8 deps2,487,490 weekly dl

semantic-release/commit-analyzer

/ 100

Health

safe to use

@semantic-release/[email protected] is safe to use (health: 66/100)

Health breakdown0 – 100

5/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (8)

conventional-changelog-angular conventional-changelog-writer conventional-commits-filter conventional-commits-parser debug import-from-esm lodash-es micromatch

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@semantic-release/commit-analyzer