Is streak-daykit safe to use?

streak-daykit has 1 known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 40/100 (high risk).

What is the latest version of streak-daykit?

The latest version of streak-daykit is 1.0.0, released 2026-07-22.

Does streak-daykit have known vulnerabilities?

Yes. streak-daykit has 1 known vulnerabilities. See depscope.dev/pkg/npm/streak-daykit for details.

Is streak-daykit deprecated?

No, streak-daykit is actively maintained. Latest release: 1.0.0 (2026-07-22).

What are alternatives to streak-daykit?

Popular alternatives to streak-daykit in npm include: ?, ansi-styles, brace-expansion, semver, ms.

What license does streak-daykit use?

streak-daykit is licensed under MIT.

streak-daykit

npmv1.0.0

Dependency-free calendar-day bucketing and streak math primitives, with an optional Node-only on-disk store. Helper for svelte-goal-streaks.

License MITpermissive1 versions1 maintainers0 deps96 weekly dl

/ 100

Health

do not use

Do not install. Package is flagged as malicious (advisory MAL-2026-12466).

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

15/25

security

0/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2026-12466	Malicious code in streak-daykit (npm)	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

⚠ Malicious package

This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.

Advisory: MAL-2026-12466 — Malicious code in streak-daykit (npm)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/streak-daykit