Is npm-package-arg safe to use?

npm-package-arg has no known vulnerabilities on the latest version (14.0.0). DepScope rates its health at 81/100 (low risk).

What is the latest version of npm-package-arg?

The latest version of npm-package-arg is 14.0.0, released 2026-05-15.

Does npm-package-arg have known vulnerabilities?

No known vulnerabilities on the latest version of npm-package-arg.

Is npm-package-arg deprecated?

No, npm-package-arg is actively maintained. Latest release: 14.0.0 (2026-05-15).

What are alternatives to npm-package-arg?

Popular alternatives to npm-package-arg in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does npm-package-arg use?

npm-package-arg is licensed under ISC.

npm-package-arg

npmv14.0.0

Parse the things that can be arguments to `npm install`

License ISCpermissive57 versions4 maintainers4 deps25,190,894 weekly dl

npm/npm-package-arg

81

/ 100

Health

safe to use

[email protected] is safe to use (health: 81/100)

Health breakdown0 – 100

15/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

6/15

community

0/15

popularity_floor

Vulnerabilities

0

none known

Bundle & TypeScript

🌟

TypeScript

7/10typed

Types from @types/npm-package-arg (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (4)

semver proc-log hosted-git-info validate-npm-package-name

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/npm-package-arg