Is express-openapi-validator safe to use?

express-openapi-validator has no known vulnerabilities on the latest version (5.6.2). DepScope rates its health at 71/100 (moderate risk).

What is the latest version of express-openapi-validator?

The latest version of express-openapi-validator is 5.6.2, released 2026-01-20.

Does express-openapi-validator have known vulnerabilities?

No known vulnerabilities on the latest version of express-openapi-validator.

Is express-openapi-validator deprecated?

No, express-openapi-validator is actively maintained. Latest release: 5.6.2 (2026-01-20).

What are alternatives to express-openapi-validator?

Popular alternatives to express-openapi-validator in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does express-openapi-validator use?

express-openapi-validator is licensed under MIT.

express-openapi-validator

npmv5.6.2

Automatically validate API requests and responses with OpenAPI 3 and Express.

License MITpermissive310 versions1 maintainers14 deps479,328 weekly dl

cdimascio/express-openapi-validator

/ 100

Health

safe to use

[email protected] is safe to use (health: 71/100)

Health breakdown0 – 100

15/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

605.0 KBminified

144.8 KB gzipped

14 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (14)

@apidevtools/json-schema-ref-parser @types/multer ajv ajv-draft-04 ajv-formats content-type json-schema-traverse lodash.clonedeep lodash.get media-typer multer ono path-to-regexp qs

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/express-openapi-validator