Is dapr-client safe to use?

dapr-client has no known vulnerabilities on the latest version (3.6.1). DepScope rates its health at 55/100 (high risk).

What is the latest version of dapr-client?

The latest version of dapr-client is 3.6.1, released 2025-09-24.

Does dapr-client have known vulnerabilities?

No known vulnerabilities on the latest version of dapr-client.

Is dapr-client deprecated?

No, dapr-client is actively maintained. Latest release: 3.6.1 (2025-09-24).

What are alternatives to dapr-client?

Popular alternatives to dapr-client in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does dapr-client use?

dapr-client is licensed under apache-2.0.

dapr-client

npmv3.6.1

The official Dapr (https://dapr.io) SDK for Node.js

License apache-2.0permissive41 versions1 maintainers10 deps1,198 weekly dl

dapr/js-sdk

/ 100

Health

use with caution

[email protected] low health (55/100) — consider alternatives

Moderate health score (55/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (10)

@grpc/grpc-js @js-temporal/polyfill @dapr/durabletask-js @types/google-protobuf @types/node-fetch body-parser express google-protobuf http-terminator node-fetch

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/dapr-client