Is @hypatiatech/jexl safe to use?

@hypatiatech/jexl has no known vulnerabilities on the latest version (4.10.5). DepScope rates its health at 52/100 (high risk).

What is the latest version of @hypatiatech/jexl?

The latest version of @hypatiatech/jexl is 4.10.5, released 2025-12-03.

Does @hypatiatech/jexl have known vulnerabilities?

No known vulnerabilities on the latest version of @hypatiatech/jexl.

Is @hypatiatech/jexl deprecated?

No, @hypatiatech/jexl is actively maintained. Latest release: 4.10.5 (2025-12-03).

What are alternatives to @hypatiatech/jexl?

Popular alternatives to @hypatiatech/jexl in npm include: ?, minimatch, semver, ansi-styles, debug.

What license does @hypatiatech/jexl use?

@hypatiatech/jexl is licensed under MIT.

@hypatiatech/jexl

npmv4.10.5

Javascript Expression Language: Powerful context-based expression parser and evaluator

License MITpermissive15 versions1 maintainers1 deps1,553 weekly dl

hypatiatech/jexl

/ 100

Health

use with caution

@hypatiatech/[email protected] low health (52/100) — consider alternatives

Moderate health score (52/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

json-schema

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@hypatiatech/jexl