Is get-intrinsic safe to use?

get-intrinsic has no known vulnerabilities on the latest version (1.3.0). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of get-intrinsic?

The latest version of get-intrinsic is 1.3.0, released 2025-02-22.

Does get-intrinsic have known vulnerabilities?

No known vulnerabilities on the latest version of get-intrinsic.

Is get-intrinsic deprecated?

No, get-intrinsic is actively maintained. Latest release: 1.3.0 (2025-02-22).

What are alternatives to get-intrinsic?

Popular alternatives to get-intrinsic in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does get-intrinsic use?

get-intrinsic is licensed under MIT.

get-intrinsic

npmv1.3.0

Get and robustly cache all JS language-level intrinsics at first require time

License MITpermissive17 versions1 maintainers10 deps130,513,890 weekly dl

ljharb/get-intrinsic

/ 100

Health

safe to use

[email protected] is safe to use (health: 64/100)

Health breakdown0 – 100

5/25

maintenance

20/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

11.9 KBminified

3.8 KB gzipped

10 direct dependencies

🌟

TypeScript

7/10typed

Types from @types/get-intrinsic (DefinitelyTyped)

OSS Scorecard

OpenSSF security posture score

3.8/10

weak

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

1

Primary author dominance

100%

GitHub stars

35

single active maintainer 3msingle author dominance

Quality signals

OSS Criticality

0.78critical

Download trend

stable(+0.7%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (10)

gopd hasown es-errors get-proto has-symbols function-bind es-object-atoms math-intrinsics es-define-property call-bind-apply-helpers

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/get-intrinsic