Is git-sha1 safe to use?

git-sha1 has no known vulnerabilities on the latest version (0.1.2). DepScope rates its health at 59/100 (high risk).

What is the latest version of git-sha1?

The latest version of git-sha1 is 0.1.2, released 2014-07-25.

Does git-sha1 have known vulnerabilities?

No known vulnerabilities on the latest version of git-sha1.

Is git-sha1 deprecated?

No, git-sha1 is actively maintained. Latest release: 0.1.2 (2014-07-25).

What are alternatives to git-sha1?

Popular alternatives to git-sha1 in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does git-sha1 use?

git-sha1 is licensed under MIT.

git-sha1

npmv0.1.2

A pure JS SHA1 implementation created for js-git.

License MITpermissive3 versions1 maintainers0 deps1,866,880 weekly dl

creationix/git-sha1

/ 100

Health

use with caution

[email protected] low health (59/100) — consider alternatives

Moderate health score (59/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.6 KBminified

0.9 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/git-sha1