Is conventional-recommended-bump safe to use?

conventional-recommended-bump has no known vulnerabilities on the latest version (11.2.0). DepScope rates its health at 55/100 (high risk).

What is the latest version of conventional-recommended-bump?

The latest version of conventional-recommended-bump is 11.2.0, released 2025-06-07.

Does conventional-recommended-bump have known vulnerabilities?

No known vulnerabilities on the latest version of conventional-recommended-bump.

Is conventional-recommended-bump deprecated?

No, conventional-recommended-bump is actively maintained. Latest release: 11.2.0 (2025-06-07).

What are alternatives to conventional-recommended-bump?

Popular alternatives to conventional-recommended-bump in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does conventional-recommended-bump use?

conventional-recommended-bump is licensed under MIT.

conventional-recommended-bump

npmv11.2.0

Get a recommended version bump based on conventional commits.

License MITpermissive52 versions5 maintainers5 deps

conventional-changelog/conventional-changelog

/ 100

Health

safe to use

[email protected] is safe to use (health: 55/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

7.8 KBminified

3.2 KB gzipped

5 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/conventional-recommended-bump (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (5)

meow @conventional-changelog/git-client conventional-changelog-preset-loader conventional-commits-filter conventional-commits-parser

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/conventional-recommended-bump