Is preact-render-to-string safe to use?

preact-render-to-string has no known vulnerabilities on the latest version (6.6.7). DepScope rates its health at 82/100 (low risk).

What is the latest version of preact-render-to-string?

The latest version of preact-render-to-string is 6.6.7, released 2026-03-28.

No known vulnerabilities on the latest version of preact-render-to-string.

No, preact-render-to-string is actively maintained. Latest release: 6.6.7 (2026-03-28).

Popular alternatives to preact-render-to-string in npm include: ?., semver, minimatch, ansi-styles, debug.

preact-render-to-string is licensed under MIT.

npmv6.6.7

Render JSX to an HTML string, with support for Preact components.

License MITpermissive122 versions6 maintainers0 deps4,892,144 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 82/100)

Health breakdown0 – 100

20/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

🌟

10/10typed

bundled

Quality signals

Publish security

npm signed

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/preact-render-to-string