Is graphmatch safe to use?

graphmatch has no known vulnerabilities on the latest version (1.1.1). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of graphmatch?

The latest version of graphmatch is 1.1.1, released 2026-02-14.

Does graphmatch have known vulnerabilities?

No known vulnerabilities on the latest version of graphmatch.

Is graphmatch deprecated?

No, graphmatch is actively maintained. Latest release: 1.1.1 (2026-02-14).

What are alternatives to graphmatch?

Popular alternatives to graphmatch in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does graphmatch use?

graphmatch is licensed under MIT.

graphmatch

npmv1.1.1

A low-level utility for matching a string against a directed acyclic graph of regexes.

License MITpermissive5 versions1 maintainers0 deps4,338,819 weekly dl

fabiospampinato/graphmatch

/ 100

Health

use with caution

[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

3/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.2 KBminified

0.6 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/graphmatch