Is cbor2 safe to use?

cbor2 has no known vulnerabilities on the latest version (2.3.0). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of cbor2?

The latest version of cbor2 is 2.3.0, released 2026-03-05.

Does cbor2 have known vulnerabilities?

No known vulnerabilities on the latest version of cbor2.

No, cbor2 is actively maintained. Latest release: 2.3.0 (2026-03-05).

What are alternatives to cbor2?

Popular alternatives to cbor2 in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

cbor2

npmv2.3.0

Encode and parse data in the Concise Binary Object Representation (CBOR) data format (RFC8949).

License MITpermissive28 versions1 maintainers1 deps160,531 weekly dl

ssh://[email protected]/hildjj/cbor2

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

20/25

maintenance

14/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

40.3 KBminified

13.4 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

@cto.af/wtf8

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/cbor2