Is strip-literal safe to use?

strip-literal has no known vulnerabilities on the latest version (3.1.0). DepScope rates its health at 67/100 (moderate risk).

What is the latest version of strip-literal?

The latest version of strip-literal is 3.1.0, released 2025-09-27.

Does strip-literal have known vulnerabilities?

No known vulnerabilities on the latest version of strip-literal.

Is strip-literal deprecated?

No, strip-literal is actively maintained. Latest release: 3.1.0 (2025-09-27).

What are alternatives to strip-literal?

Popular alternatives to strip-literal in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does strip-literal use?

strip-literal is licensed under MIT.

strip-literal

npmv3.1.0

Strip comments and string literals from JavaScript code

License MITpermissive16 versions1 maintainers1 deps22,849,141 weekly dl

antfu/strip-literal

/ 100

Health

use with caution

[email protected] low health (67/100) — consider alternatives

Moderate health score (67/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

9/15

maturity

3/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

6.8 KBminified

2.4 KB gzipped

1 direct dependencies

ESM

🌟

TypeScript

10/10typed

bundled

Quality signals

Download trend

stable(0%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (1)

js-tokens

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/strip-literal