Is @automattic/components safe to use?

@automattic/components has no known vulnerabilities on the latest version (3.0.3). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of @automattic/components?

The latest version of @automattic/components is 3.0.3, released 2025-11-10.

Does @automattic/components have known vulnerabilities?

No known vulnerabilities on the latest version of @automattic/components.

Is @automattic/components deprecated?

No, @automattic/components is actively maintained. Latest release: 3.0.3 (2025-11-10).

What are alternatives to @automattic/components?

Popular alternatives to @automattic/components in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @automattic/components use?

@automattic/components is licensed under GPL-2.0-or-later.

@automattic/components

npmv3.0.3

Automattic Components.

License GPL-2.0-or-later22 versions55 maintainers36 deps7,332 weekly dl

Automattic/wp-calypso

/ 100

Health

use with caution

@automattic/[email protected] low health (63/100) — consider alternatives

Moderate health score (63/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@automattic/components