Is posthog-js safe to use?

posthog-js has no known vulnerabilities on the latest version (1.414.0). DepScope rates its health at 93/100 (low risk).

What is the latest version of posthog-js?

The latest version of posthog-js is 1.414.0, released 2026-08-07.

Does posthog-js have known vulnerabilities?

No known vulnerabilities on the latest version of posthog-js.

Is posthog-js deprecated?

No, posthog-js is actively maintained. Latest release: 1.414.0 (2026-08-07).

What are alternatives to posthog-js?

Popular alternatives to posthog-js in npm include: ?, semver, minimatch, debug, ansi-styles.

What license does posthog-js use?

posthog-js is licensed under (Apache-2.0 AND MIT).

posthog-js

npmv1.414.0

Posthog-js allows you to automatically capture usage and send events to PostHog.

License (Apache-2.0 AND MIT)permissive1303 versions22 maintainers10 deps10,113,681 weekly dl

PostHog/posthog-js

/ 100

Health

safe to use

[email protected] is safe to use (health: 93/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

8/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

230.3 KBminified

75.6 KB gzipped

10 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (10)

fflate preact core-js dompurify web-vitals @posthog/core @posthog/types web-vitals-soft-navs @posthog/browser-common query-selector-shadow-dom

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/posthog-js

posthog-js

npmv1.414.0

Posthog-js allows you to automatically capture usage and send events to PostHog.

License (Apache-2.0 AND MIT)permissive1303 versions22 maintainers10 deps10,113,681 weekly dl

PostHog/posthog-js

/ 100

Health

safe to use

[email protected] is safe to use (health: 93/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

8/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

230.3 KBminified

75.6 KB gzipped

10 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (10)

fflate preact core-js dompurify web-vitals @posthog/core @posthog/types web-vitals-soft-navs @posthog/browser-common query-selector-shadow-dom

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/posthog-js