riot has no known vulnerabilities on the latest version (10.1.6). DepScope rates its health at 80/100 (low risk).

What is the latest version of riot?

The latest version of riot is 10.1.6, released 2026-08-06.

Does riot have known vulnerabilities?

No known vulnerabilities on the latest version of riot.

No, riot is actively maintained. Latest release: 10.1.6 (2026-08-06).

What are alternatives to riot?

Popular alternatives to riot in npm include: ?, ansi-styles, brace-expansion, semver, ms.

riot

npmv10.1.6

Simple and elegant component-based UI library

License MITpermissive301 versions1 maintainers1 deps7,453 weekly dl

riot/riot

/ 100

Health

use with caution

Package name resembles 'ret' (possible typosquat). Verify the name is what you intend before installing.

Possible typosquat of 'ret'

Health breakdown0 – 100

25/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

9/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

⚠ Possible typosquat

Name is close to a popular package. Targets:

ret (close_name dist 2)

Health History

Dependency Tree

License Audit

Dependencies (1)

@riotjs/dom-bindings

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/riot

riot

npmv10.1.6

Simple and elegant component-based UI library

License MITpermissive301 versions1 maintainers1 deps7,453 weekly dl

riot/riot

/ 100

Health

use with caution

Package name resembles 'ret' (possible typosquat). Verify the name is what you intend before installing.

Possible typosquat of 'ret'

Health breakdown0 – 100

25/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

9/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

⚠ Possible typosquat

Name is close to a popular package. Targets:

ret (close_name dist 2)

Health History

Dependency Tree

License Audit

Dependencies (1)

@riotjs/dom-bindings

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/riot