Is streak-calendar-core safe to use?

streak-calendar-core has 1 known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 40/100 (high risk).

What is the latest version of streak-calendar-core?

The latest version of streak-calendar-core is 1.0.0, released 2026-07-23.

Does streak-calendar-core have known vulnerabilities?

Yes. streak-calendar-core has 1 known vulnerabilities. See depscope.dev/pkg/npm/streak-calendar-core for details.

Is streak-calendar-core deprecated?

No, streak-calendar-core is actively maintained. Latest release: 1.0.0 (2026-07-23).

What are alternatives to streak-calendar-core?

Popular alternatives to streak-calendar-core in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does streak-calendar-core use?

streak-calendar-core is licensed under MIT.

streak-calendar-core

npmv1.0.0

Dependency-free calendar-day bucketing and streak math primitives, with an optional Node-only on-disk store. Helper for svelte-daily-streaks.

License MITpermissive1 versions1 maintainers0 deps106 weekly dl

/ 100

Health

do not use

Do not install. Package is flagged as malicious (advisory MAL-2026-12458).

Health breakdown0 – 100

25/25

maintenance

3/20

popularity

15/25

security

0/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2026-12458	Malicious code in streak-calendar-core (npm)	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

⚠ Malicious package

This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.

Advisory: MAL-2026-12458 — Malicious code in streak-calendar-core (npm)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/streak-calendar-core