Is @slack/bolt safe to use?

@slack/bolt has no known vulnerabilities on the latest version (4.7.2). DepScope rates its health at 92/100 (low risk).

What is the latest version of @slack/bolt?

The latest version of @slack/bolt is 4.7.2, released 2026-04-30.

Does @slack/bolt have known vulnerabilities?

No known vulnerabilities on the latest version of @slack/bolt.

Is @slack/bolt deprecated?

No, @slack/bolt is actively maintained. Latest release: 4.7.2 (2026-04-30).

What are alternatives to @slack/bolt?

Popular alternatives to @slack/bolt in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @slack/bolt use?

@slack/bolt is licensed under MIT.

@slack/bolt

npmv4.7.2

A framework for building Slack apps, fast.

License MITpermissive121 versions11 maintainers10 deps1,858,874 weekly dl

slackapi/bolt-js

/ 100

Health

safe to use

@slack/[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

10/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (10)

@slack/logger @slack/oauth @slack/socket-mode @slack/types @slack/web-api axios express path-to-regexp raw-body tsscmp

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@slack/bolt

@slack/bolt

npmv4.7.2

A framework for building Slack apps, fast.

License MITpermissive121 versions11 maintainers10 deps1,858,874 weekly dl

slackapi/bolt-js

/ 100

Health

safe to use

@slack/[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

10/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (10)

@slack/logger @slack/oauth @slack/socket-mode @slack/types @slack/web-api axios express path-to-regexp raw-body tsscmp

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@slack/bolt