Is @asyncapi/html-template safe to use?

@asyncapi/html-template has no known vulnerabilities on the latest version (3.5.6). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of @asyncapi/html-template?

The latest version of @asyncapi/html-template is 3.5.6, released 2026-03-14.

Does @asyncapi/html-template have known vulnerabilities?

No known vulnerabilities on the latest version of @asyncapi/html-template.

Is @asyncapi/html-template deprecated?

No, @asyncapi/html-template is actively maintained. Latest release: 3.5.6 (2026-03-14).

What are alternatives to @asyncapi/html-template?

Popular alternatives to @asyncapi/html-template in npm include: debug, lru-cache, string-width, commander, picomatch.

What license does @asyncapi/html-template use?

@asyncapi/html-template is licensed under Apache-2.0.

@asyncapi/html-template

npmv3.5.6

HTML template for the AsyncAPI generator.

License Apache-2.0permissive128 versions3 maintainers9 deps

asyncapi/html-template

/ 100

Health

do not use

Do not install. Package is flagged as malicious (advisory MAL-2025-190658).

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

⚠ Malicious package

This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.

Advisory: MAL-2025-190658 — Malicious code in @asyncapi/html-template (npm)

Health History

Dependency Tree

License Audit

Dependencies (9)

@asyncapi/generator-react-sdk @asyncapi/parser @asyncapi/react-component highlight.js puppeteer react react-dom rimraf sync-fetch

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@asyncapi/html-template