Is npm-packlist safe to use?

npm-packlist has no known vulnerabilities on the latest version (11.2.0). DepScope rates its health at 91/100 (low risk).

What is the latest version of npm-packlist?

The latest version of npm-packlist is 11.2.0, released 2026-06-05.

Does npm-packlist have known vulnerabilities?

No known vulnerabilities on the latest version of npm-packlist.

Is npm-packlist deprecated?

No, npm-packlist is actively maintained. Latest release: 11.2.0 (2026-06-05).

What are alternatives to npm-packlist?

Popular alternatives to npm-packlist in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does npm-packlist use?

npm-packlist is licensed under ISC.

npm-packlist

npmv11.2.0

Get a list of the files to add from a folder into an npm package

License ISCpermissive71 versions4 maintainers3 deps14,191,976 weekly dl

npm/npm-packlist

/ 100

Health

safe to use

[email protected] is safe to use (health: 91/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

6/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

7/10typed

Types from @types/npm-packlist (DefinitelyTyped)

Quality signals

Download trend

stable(0%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (3)

glob ignore-walk proc-log

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/npm-packlist

npm-packlist

npmv11.2.0

Get a list of the files to add from a folder into an npm package

License ISCpermissive71 versions4 maintainers3 deps14,191,976 weekly dl

npm/npm-packlist

/ 100

Health

safe to use

[email protected] is safe to use (health: 91/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

6/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

7/10typed

Types from @types/npm-packlist (DefinitelyTyped)

Quality signals

Download trend

stable(0%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (3)

glob ignore-walk proc-log

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/npm-packlist