Is is-descriptor safe to use?

is-descriptor has no known vulnerabilities on the latest version (3.1.2). DepScope rates its health at 83/100 (low risk).

What is the latest version of is-descriptor?

The latest version of is-descriptor is 3.1.2, released 2026-05-11.

Does is-descriptor have known vulnerabilities?

No known vulnerabilities on the latest version of is-descriptor.

Is is-descriptor deprecated?

No, is-descriptor is actively maintained. Latest release: 3.1.2 (2026-05-11).

What are alternatives to is-descriptor?

Popular alternatives to is-descriptor in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does is-descriptor use?

is-descriptor is licensed under MIT.

is-descriptor

npmv3.1.2

Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.

License MITpermissive18 versions2 maintainers4 deps45,608,490 weekly dl

inspect-js/is-descriptor

/ 100

Health

safe to use

[email protected] is safe to use (health: 83/100)

Health breakdown0 – 100

20/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

3/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

2.8 KBminified

1.1 KB gzipped

4 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Quality signals

OSS Criticality

0.78critical

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (4)

gopd hasown is-accessor-descriptor is-data-descriptor

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/is-descriptor