Is minipass safe to use?

minipass has no known vulnerabilities on the latest version (7.1.3). DepScope rates its health at 82/100 (low risk).

What is the latest version of minipass?

The latest version of minipass is 7.1.3, released 2026-02-19.

Does minipass have known vulnerabilities?

No known vulnerabilities on the latest version of minipass.

Is minipass deprecated?

No, minipass is actively maintained. Latest release: 7.1.3 (2026-02-19).

What are alternatives to minipass?

Popular alternatives to minipass in npm include: semver, minimatch, ansi-styles, brace-expansion, strip-ansi.

What license does minipass use?

minipass is licensed under BlueOak-1.0.0.

minipass

npmv7.1.3

minimal implementation of a PassThrough stream

License BlueOak-1.0.0permissive95 versions1 maintainers0 deps249,896,230 weekly dl

isaacs/minipass

/ 100

Health

safe to use

[email protected] is safe to use (health: 82/100)

Health breakdown0 – 100

20/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

9.5 KBminified

3.2 KB gzipped

0 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

OSS Scorecard

OpenSSF security posture score

3.6/10

weak

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

1

Primary author dominance

100%

GitHub stars

258

single active maintainer 3msingle author dominance

Quality signals

OSS Criticality

0.78critical

Download trend

stable(+2.9%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/minipass