Is bpmn-moddle safe to use?

bpmn-moddle has no known vulnerabilities on the latest version (10.0.0). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of bpmn-moddle?

The latest version of bpmn-moddle is 10.0.0, released 2026-01-19.

Does bpmn-moddle have known vulnerabilities?

No known vulnerabilities on the latest version of bpmn-moddle.

Is bpmn-moddle deprecated?

No, bpmn-moddle is actively maintained. Latest release: 10.0.0 (2026-01-19).

What are alternatives to bpmn-moddle?

Popular alternatives to bpmn-moddle in npm include: minimatch, wrap-ansi, @types/node, eslint-visitor-keys, ajv.

What license does bpmn-moddle use?

bpmn-moddle is licensed under MIT.

bpmn-moddle

npmv10.0.0

A moddle wrapper for BPMN 2.0

License MITpermissive86 versions12 maintainers3 deps

bpmn-io/bpmn-moddle

/ 100

Health

safe to use

[email protected] is safe to use (health: 60/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

65.6 KBminified

15.3 KB gzipped

3 direct dependencies

🌟

TypeScript

7/10typed

Types from @types/bpmn-moddle (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (3)

moddle min-dash moddle-xml

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/bpmn-moddle