Is decimal.js safe to use?

decimal.js has no known vulnerabilities on the latest version (10.6.0). DepScope rates its health at 77/100 (moderate risk).

What is the latest version of decimal.js?

The latest version of decimal.js is 10.6.0, released 2025-07-06.

Does decimal.js have known vulnerabilities?

No known vulnerabilities on the latest version of decimal.js.

Is decimal.js deprecated?

No, decimal.js is actively maintained. Latest release: 10.6.0 (2025-07-06).

What are alternatives to decimal.js?

Popular alternatives to decimal.js in npm include: ?., semver, minimatch, ansi-styles, debug.

What license does decimal.js use?

decimal.js is licensed under MIT.

decimal.js

npmv10.6.0

An arbitrary-precision Decimal type for JavaScript.

License MITpermissive53 versions1 maintainers0 deps60,002,263 weekly dl

MikeMcl/decimal.js

/ 100

Health

safe to use

[email protected] is safe to use (health: 77/100)

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

31.5 KBminified

12.4 KB gzipped

0 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.76critical

Download trend

stable(+8.9%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/decimal.js