Is react-hot-toast safe to use?

react-hot-toast has no known vulnerabilities on the latest version (2.6.0). DepScope rates its health at 49/100 (high risk).

What is the latest version of react-hot-toast?

The latest version of react-hot-toast is 2.6.0, released 2025-08-15.

Does react-hot-toast have known vulnerabilities?

No known vulnerabilities on the latest version of react-hot-toast.

Is react-hot-toast deprecated?

No, react-hot-toast is actively maintained. Latest release: 2.6.0 (2025-08-15).

What are alternatives to react-hot-toast?

Popular alternatives to react-hot-toast in npm include: semver, debug, ansi-styles, minimatch, strip-ansi.

What license does react-hot-toast use?

react-hot-toast is licensed under MIT.

react-hot-toast

npmv2.6.0

Smoking hot React Notifications. Lightweight, customizable and beautiful by default.

License MITpermissive24 versions1 maintainers2 deps

timolins/react-hot-toast

/ 100

Health

safe to use

[email protected] is safe to use (health: 49/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

11.9 KBminified

4.7 KB gzipped

2 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.69high

Health History

Dependency Tree

License Audit

Dependencies (2)

csstype goober

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/react-hot-toast