Is package-json-from-dist safe to use?

package-json-from-dist has no known vulnerabilities on the latest version (1.0.1). DepScope rates its health at 58/100 (high risk).

What is the latest version of package-json-from-dist?

The latest version of package-json-from-dist is 1.0.1, released 2024-09-26.

Does package-json-from-dist have known vulnerabilities?

No known vulnerabilities on the latest version of package-json-from-dist.

Is package-json-from-dist deprecated?

No, package-json-from-dist is actively maintained. Latest release: 1.0.1 (2024-09-26).

What are alternatives to package-json-from-dist?

Popular alternatives to package-json-from-dist in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does package-json-from-dist use?

package-json-from-dist is licensed under BlueOak-1.0.0.

package-json-from-dist

npmv1.0.1

Load the local package.json from either src or dist folder

License BlueOak-1.0.0permissive2 versions1 maintainers0 deps86,365,831 weekly dl

isaacs/package-json-from-dist

/ 100

Health

safe to use

[email protected] is safe to use (health: 58/100)

Health breakdown0 – 100

5/25

maintenance

20/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.0 KBminified

0.5 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Maintainer trust

Active maintainers (3m)

Contributors (12m)

GitHub stars

0

Quality signals

OSS Criticality

0.62high

Download trend

stable(+3.7%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/package-json-from-dist