Is import-sync safe to use?

import-sync has no known vulnerabilities on the latest version (2.2.6). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of import-sync?

The latest version of import-sync is 2.2.6, released 2026-04-23.

Does import-sync have known vulnerabilities?

No known vulnerabilities on the latest version of import-sync.

Is import-sync deprecated?

No, import-sync is actively maintained. Latest release: 2.2.6 (2026-04-23).

What are alternatives to import-sync?

Popular alternatives to import-sync in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does import-sync use?

import-sync is licensed under MIT.

import-sync

npmv2.2.6

Synchronously import dynamic ECMAScript Modules similar to CommonJS require. Basic wrapper around esm for compatibility with both ESM and CJS projects in NodeJS.

License MITpermissive28 versions1 maintainers1 deps14,132 weekly dl

nktnet1/import-sync

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

esm-sync

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/import-sync