Is pull-glob safe to use?

pull-glob has no known vulnerabilities on the latest version (1.0.7). DepScope rates its health at 45/100 (high risk).

What is the latest version of pull-glob?

The latest version of pull-glob is 1.0.7, released 2018-03-29.

Does pull-glob have known vulnerabilities?

No known vulnerabilities on the latest version of pull-glob.

Is pull-glob deprecated?

No, pull-glob is actively maintained. Latest release: 1.0.7 (2018-03-29).

What are alternatives to pull-glob?

Popular alternatives to pull-glob in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does pull-glob use?

pull-glob is licensed under MIT.

pull-glob

npmv1.0.7

extended globs as pull-streams

License MITpermissive8 versions1 maintainers2 deps584 weekly dl

dominictarr/pull-glob

/ 100

Health

use with caution

[email protected] low health (45/100) — consider alternatives

Moderate health score (45/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

3/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

11.4 KBminified

3.8 KB gzipped

2 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (2)

pull-fs pull-stream

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/pull-glob