Is pkg-dir safe to use?

pkg-dir has no known vulnerabilities on the latest version (9.0.0). DepScope rates its health at 44/100 (high risk).

What is the latest version of pkg-dir?

The latest version of pkg-dir is 9.0.0, released 2025-06-05.

Does pkg-dir have known vulnerabilities?

No known vulnerabilities on the latest version of pkg-dir.

Is pkg-dir deprecated?

Yes, pkg-dir is deprecated: Renamed to `package-directory`. Consider using debug instead.

What are alternatives to pkg-dir?

Popular alternatives to pkg-dir in npm include: debug, minimatch, ansi-styles, brace-expansion, strip-ansi.

pkg-dir

npmv9.0.0deprecated

Find the root directory of a Node.js project or npm package

License MITpermissive12 versions1 maintainers1 deps81,884,524 weekly dl

sindresorhus/pkg-dir

/ 100

Health

find alternative

pkg-dir is deprecated — find an alternative

Package is deprecated

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.2 KBminified

0.6 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

OSS Scorecard

OpenSSF security posture score

3.8/10

weak

Maintainer trust

Active maintainers (3m)

Contributors (12m)

GitHub stars

0

Quality signals

OSS Criticality

0.77critical

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (1)

find-up-simple

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/pkg-dir