Is neverthrow-core safe to use?

neverthrow-core has 1 known vulnerabilities on the latest version (1.1.2). DepScope rates its health at 40/100 (high risk).

What is the latest version of neverthrow-core?

The latest version of neverthrow-core is 1.1.2, released 2026-08-11.

Does neverthrow-core have known vulnerabilities?

Yes. neverthrow-core has 1 known vulnerabilities. See depscope.dev/pkg/npm/neverthrow-core for details.

Is neverthrow-core deprecated?

No, neverthrow-core is actively maintained. Latest release: 1.1.2 (2026-08-11).

What are alternatives to neverthrow-core?

Popular alternatives to neverthrow-core in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does neverthrow-core use?

neverthrow-core is licensed under MIT.

neverthrow-core

npmv1.1.2

Stop throwing errors, and instead return Results!

License MITpermissive2 versions1 maintainers0 deps120 weekly dl

supermacro/neverthrow

/ 100

Health

do not use

neverthrow-core has critical vulnerabilities — do not use

Moderate health score (40/100) — verify manually
1 critical vulnerabilities

Health breakdown0 – 100

20/25

maintenance

3/20

popularity

15/25

security

3/15

maturity

7/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2026-14283	Malicious code in neverthrow-core (npm)	—

Bundle & TypeScript

📦

Bundle Size

6.9 KBminified

2.0 KB gzipped

0 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/neverthrow-core