Is string-matching safe to use?

string-matching has no known vulnerabilities on the latest version (1.16.2). DepScope rates its health at 49/100 (high risk).

What is the latest version of string-matching?

The latest version of string-matching is 1.16.2, released 2025-07-28.

Does string-matching have known vulnerabilities?

No known vulnerabilities on the latest version of string-matching.

Is string-matching deprecated?

No, string-matching is actively maintained. Latest release: 1.16.2 (2025-07-28).

What are alternatives to string-matching?

Popular alternatives to string-matching in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does string-matching use?

string-matching is licensed under MIT.

string-matching

npmv1.16.2

Checks strings against patterns and collects matched substrings

License MITpermissive36 versions1 maintainers4 deps74 weekly dl

MayamaTakeshi/string-matching

/ 100

Health

use with caution

[email protected] low health (49/100) — consider alternatives

Moderate health score (49/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (4)

merge node-notifier set-value tmpl

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/string-matching