glob has no known vulnerabilities on the latest version (13.0.6). DepScope rates its health at 87/100 (low risk).

What is the latest version of glob?

The latest version of glob is 13.0.6, released 2026-02-19.

Does glob have known vulnerabilities?

No known vulnerabilities on the latest version of glob.

No, glob is actively maintained. Latest release: 13.0.6 (2026-02-19).

What are alternatives to glob?

Popular alternatives to glob in npm include: debug, minimatch, ansi-styles, brace-expansion, strip-ansi.

What license does glob use?

glob is licensed under BlueOak-1.0.0.

glob

npmv13.0.6

the most correct and second fastest glob implementation in JavaScript

License BlueOak-1.0.0permissive168 versions1 maintainers3 deps337,089,001 weekly dl

ssh://[email protected]/isaacs/node-glob

/ 100

Health

safe to use

[email protected] is safe to use (health: 87/100)

Health breakdown0 – 100

20/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

79.8 KBminified

24.2 KB gzipped

3 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

6

Primary author dominance

91%

GitHub stars

8,721

single active maintainer 3msingle author dominance

Quality signals

OSS Criticality

0.78critical

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

Dependencies (3)

minimatch minipass path-scurry

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/glob