Is claude-cup safe to use?

claude-cup has 1 known vulnerabilities on the latest version (0.9.12). DepScope rates its health at 40/100 (high risk).

What is the latest version of claude-cup?

The latest version of claude-cup is 0.9.12, released 2026-07-19.

Does claude-cup have known vulnerabilities?

Yes. claude-cup has 1 known vulnerabilities. See depscope.dev/pkg/npm/claude-cup for details.

Is claude-cup deprecated?

No, claude-cup is actively maintained. Latest release: 0.9.12 (2026-07-19).

What are alternatives to claude-cup?

Popular alternatives to claude-cup in npm include: ?, ansi-styles, brace-expansion, semver, ms.

What license does claude-cup use?

claude-cup is licensed under MIT.

claude-cup

npmv0.9.12

Claude Cup — worldwide building contest. Track your Value/Token Ratio, climb the real-time leaderboard, and fill a live trophy in your terminal.

License MITpermissive42 versions1 maintainers3 deps

Itaib24/Claude-

/ 100

Health

do not use

claude-cup has critical vulnerabilities — do not use

Moderate health score (40/100) — verify manually
1 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

15/25

security

12/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2026-5789	Malicious code in claude-cup (npm)	—

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (3)

chokidar @modelcontextprotocol/sdk better-sqlite3

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/claude-cup