Is istanbul-reports safe to use?

istanbul-reports has no known vulnerabilities on the latest version (3.2.0). DepScope rates its health at 90/100 (low risk).

What is the latest version of istanbul-reports?

The latest version of istanbul-reports is 3.2.0, released 2025-08-18.

Does istanbul-reports have known vulnerabilities?

No known vulnerabilities on the latest version of istanbul-reports.

Is istanbul-reports deprecated?

No, istanbul-reports is actively maintained. Latest release: 3.2.0 (2025-08-18).

What are alternatives to istanbul-reports?

Popular alternatives to istanbul-reports in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does istanbul-reports use?

istanbul-reports is licensed under BSD-3-Clause.

istanbul-reports

npmv3.2.0

istanbul reports

License BSD-3-Clausepermissive58 versions5 maintainers2 deps67,765,745 weekly dl

istanbuljs/istanbuljs

/ 100

Health

safe to use

[email protected] is safe to use (health: 90/100)

Health breakdown0 – 100

20/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.5 KBminified

0.3 KB gzipped

2 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/istanbul-reports (DefinitelyTyped)

Quality signals

OSS Criticality

0.86critical

Download trend

stable(+1.4%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (2)

html-escaper istanbul-lib-report

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/istanbul-reports