Is socket.io safe to use?

socket.io has no known vulnerabilities on the latest version (4.8.3). DepScope rates its health at 88/100 (low risk).

What is the latest version of socket.io?

The latest version of socket.io is 4.8.3, released 2025-12-23.

Does socket.io have known vulnerabilities?

No known vulnerabilities on the latest version of socket.io.

Is socket.io deprecated?

No, socket.io is actively maintained. Latest release: 4.8.3 (2025-12-23).

What are alternatives to socket.io?

Popular alternatives to socket.io in npm include: debug, minimatch, strip-ansi, ms, lru-cache.

What license does socket.io use?

socket.io is licensed under MIT.

socket.io

npmv4.8.3

node.js realtime framework server

License MITpermissive161 versions2 maintainers7 deps12,960,334 weekly dl

socketio/socket.io

/ 100

Health

safe to use

[email protected] is safe to use (health: 88/100)

Health breakdown0 – 100

15/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

13/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

261.0 KBminified

54.1 KB gzipped

7 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Download trend

stable(0%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (7)

accepts base64id cors debug engine.io socket.io-adapter socket.io-parser

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/socket.io