Is @depup/micromark safe to use?

@depup/micromark has no known vulnerabilities on the latest version (4.0.2-depup.0). DepScope rates its health at 37/100 (critical risk).

What is the latest version of @depup/micromark?

The latest version of @depup/micromark is 4.0.2-depup.0, released 2026-03-17.

Does @depup/micromark have known vulnerabilities?

No known vulnerabilities on the latest version of @depup/micromark.

Is @depup/micromark deprecated?

No, @depup/micromark is actively maintained. Latest release: 4.0.2-depup.0 (2026-03-17).

What are alternatives to @depup/micromark?

Popular alternatives to @depup/micromark in npm include: ?, semver, debug, minimatch.

What license does @depup/micromark use?

@depup/micromark is licensed under MIT.

@depup/micromark

npmv4.0.2-depup.0

[DepUp] small commonmark compliant markdown parser with positional info and concrete tokens

License MITpermissive1 versions1 maintainers17 deps2 weekly dl

micromark/micromark

/ 100

Health

use with caution

@depup/[email protected] low health (37/100) — consider alternatives

Moderate health score (37/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

0/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (17)

@types/debug debug decode-named-character-reference devlop micromark-core-commonmark micromark-factory-space micromark-util-character micromark-util-chunked micromark-util-combine-extensions micromark-util-decode-numeric-character-reference micromark-util-encode micromark-util-normalize-identifier micromark-util-resolve-all micromark-util-sanitize-uri micromark-util-subtokenize micromark-util-symbol micromark-util-types

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@depup/micromark