{"package":"@pnpm/tarball-fetcher","ecosystem":"npm","latest_version":"1006.0.6","description":"Fetcher for packages hosted as tarballs","license":"MIT","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"https://github.com/pnpm/pnpm/tree/main/fetching/tarball-fetcher#readme","repository":"https://github.com/pnpm/pnpm.git#main","downloads_weekly":null,"health":{"score":63,"risk":"moderate","breakdown":{"maintenance":20,"popularity":0,"security":25,"maturity":15,"community":3},"deprecated":false,"max_score":100},"vulnerabilities":{"count":0,"critical":0,"high":0,"medium":0,"low":0,"details":[]},"versions":{"latest":"1006.0.6","total_count":252,"recent":["1001.0.13","1001.0.14","1001.0.15","1001.1.0","1002.0.0","1002.0.1","1003.0.0","1003.0.1","1003.0.2","1003.0.3","1004.0.0","1004.0.1","1005.0.0","1006.0.0","1006.0.1","1006.0.2","1006.0.3","1006.0.4","1006.0.5","1006.0.6"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":2,"first_published":"2017-12-02T13:23:09.966Z","last_published":"2026-03-24T16:32:43.731Z","dependencies_count":14,"dependencies":["@zkochan/retry","lodash.throttle","p-map-values","path-temp","ramda","rename-overwrite","@pnpm/core-loggers","@pnpm/error","@pnpm/fetching-types","@pnpm/fs.packlist","@pnpm/prepare-package","@pnpm/graceful-fs","@pnpm/fetcher-base","@pnpm/types"]},"github_stats":null,"bundle":{"size_kb":913.1,"gzip_kb":266.0,"dependency_count":14,"has_js_module":false,"has_side_effects":true,"scoped":true,"source":"bundlephobia"},"typescript":{"score":10,"has_types":true,"types_source":"bundled","types_package":null},"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"1006.0.6","version_hint":null,"summary":"@pnpm/tarball-fetcher@1006.0.6 is safe to use (health: 63/100)"},"version_scoped":null,"requested_version":null,"_cache":"miss","_response_ms":953,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":20,"first_release_age_days":3071,"last_release_days_ago":37,"avg_days_between_releases":162,"release_velocity":"active"}}