Is downshift safe to use?

downshift has no known vulnerabilities on the latest version (9.3.2). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of downshift?

The latest version of downshift is 9.3.2, released 2026-02-19.

Does downshift have known vulnerabilities?

No known vulnerabilities on the latest version of downshift.

Is downshift deprecated?

No, downshift is actively maintained. Latest release: 9.3.2 (2026-02-19).

What are alternatives to downshift?

Popular alternatives to downshift in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does downshift use?

downshift is licensed under MIT.

downshift

npmv9.3.2

🏎 A set of primitives to build simple, flexible, WAI-ARIA compliant React autocomplete, combobox or select dropdown components.

License MITpermissive371 versions2 maintainers5 deps

downshift-js/downshift

/ 100

Health

safe to use

[email protected] is safe to use (health: 63/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

51.2 KBminified

14.3 KB gzipped

5 direct dependencies

ESM

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

@babel/runtime compute-scroll-into-view prop-types react-is tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/downshift