Is @tarojs/taro safe to use?

@tarojs/taro has no known vulnerabilities on the latest version (4.2.0). DepScope rates its health at 88/100 (low risk).

What is the latest version of @tarojs/taro?

The latest version of @tarojs/taro is 4.2.0, released 2026-04-13.

Does @tarojs/taro have known vulnerabilities?

No known vulnerabilities on the latest version of @tarojs/taro.

Is @tarojs/taro deprecated?

No, @tarojs/taro is actively maintained. Latest release: 4.2.0 (2026-04-13).

What are alternatives to @tarojs/taro?

Popular alternatives to @tarojs/taro in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @tarojs/taro use?

@tarojs/taro is licensed under MIT.

@tarojs/taro

npmv4.2.0

Taro framework

License MITpermissive1157 versions12 maintainers3 deps14,929 weekly dl

NervJS/taro

/ 100

Health

safe to use

@tarojs/[email protected] is safe to use (health: 88/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

13/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

76.1 KBminified

25.3 KB gzipped

3 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@tarojs/api @tarojs/runtime @types/postcss-url

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tarojs/taro

@tarojs/taro

npmv4.2.0

Taro framework

License MITpermissive1157 versions12 maintainers3 deps14,929 weekly dl

NervJS/taro

/ 100

Health

safe to use

@tarojs/[email protected] is safe to use (health: 88/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

13/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

76.1 KBminified

25.3 KB gzipped

3 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@tarojs/api @tarojs/runtime @types/postcss-url

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tarojs/taro