{"package":"picomatch-browser","ecosystem":"npm","latest_version":"2.2.6","description":"(temporary fork of picomatch) Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.","license":"MIT","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"https://github.com/acao/picomatch","repository":"https://github.com/micromatch/picomatch","downloads_weekly":901724,"health":{"score":75,"risk":"moderate","breakdown":{"maintenance":20,"popularity":14,"security":25,"maturity":9,"community":7,"popularity_floor":0},"deprecated":false,"max_score":100},"vulnerabilities":{"count":0,"critical":0,"high":0,"medium":0,"low":0,"details":[]},"versions":{"latest":"2.2.6","total_count":5,"recent":["2.2.2","2.2.3","2.2.4","2.2.5","2.2.6"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":1,"first_published":"2021-12-07T19:56:06.775Z","last_published":"2021-12-11T17:17:42.606Z","dependencies_count":0,"dependencies":[]},"github_stats":{"stars":1252,"forks":101,"open_issues":43,"is_archived":false,"pushed_at":"2026-04-20T08:37:18+00:00"},"bundle":null,"typescript":{"score":0,"has_types":false,"types_source":null,"types_package":null},"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"2.2.6","version_hint":null,"summary":"picomatch-browser@2.2.6 is safe to use (health: 75/100)"},"version_scoped":null,"_meta":{"endpoint":"check","tier":"full","philosophy":"DepScope is free. Use the cheapest endpoint that answers your real question.","cheaper_alternatives":[{"endpoint":"/api/exists/npm/picomatch-browser","tokens_estimated":12,"use_when":"you only need to know if the package exists (hallucination guard)"},{"endpoint":"/api/health/npm/picomatch-browser","tokens_estimated":80,"use_when":"you only need a 0-100 score for go/no-go (>=70 = safe)"},{"endpoint":"/api/prompt/npm/picomatch-browser","tokens_estimated":280,"use_when":"you want a plain-text LLM-friendly brief instead of JSON"},{"endpoint":"POST /api/check_bulk","tokens_estimated":60,"use_when":"you have 5+ packages to check; sends one round-trip instead of N"}],"docs":"https://depscope.dev/integrate","hint_bulk":"You've called /api/check 95 times in 60s. Save bandwidth + tokens with POST /api/check_bulk (1 round-trip for N pkgs)."},"requested_version":null,"_cache":"hit","_response_ms":0,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":5,"first_release_age_days":1650,"last_release_days_ago":1646,"avg_days_between_releases":412,"release_velocity":"stale"}}