Is posthog-js safe to use?

posthog-js has no known vulnerabilities on the latest version (1.372.5). DepScope rates its health at 87/100 (low risk).

What is the latest version of posthog-js?

The latest version of posthog-js is 1.372.5, released 2026-04-29.

Does posthog-js have known vulnerabilities?

No known vulnerabilities on the latest version of posthog-js.

Is posthog-js deprecated?

No, posthog-js is actively maintained. Latest release: 1.372.5 (2026-04-29).

What are alternatives to posthog-js?

Popular alternatives to posthog-js in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does posthog-js use?

posthog-js is licensed under SEE LICENSE IN LICENSE.

posthog-js

npmv1.372.5

Posthog-js allows you to automatically capture usage and send events to PostHog.

License SEE LICENSE IN LICENSE1139 versions17 maintainers13 deps5,769,788 weekly dl

PostHog/posthog-js

/ 100

Health

safe to use

[email protected] is safe to use (health: 87/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (13)

@opentelemetry/api @opentelemetry/api-logs @opentelemetry/exporter-logs-otlp-http @opentelemetry/resources @opentelemetry/sdk-logs core-js dompurify fflate preact query-selector-shadow-dom web-vitals @posthog/core @posthog/types

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/posthog-js

posthog-js

npmv1.372.5

Posthog-js allows you to automatically capture usage and send events to PostHog.

License SEE LICENSE IN LICENSE1139 versions17 maintainers13 deps5,769,788 weekly dl

PostHog/posthog-js

/ 100

Health

safe to use

[email protected] is safe to use (health: 87/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (13)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/posthog-js