Is @lavamoat/webpack safe to use?

@lavamoat/webpack has no known vulnerabilities on the latest version (2.2.4). DepScope rates its health at 61/100 (moderate risk).

What is the latest version of @lavamoat/webpack?

The latest version of @lavamoat/webpack is 2.2.4, released 2026-06-25.

Does @lavamoat/webpack have known vulnerabilities?

No known vulnerabilities on the latest version of @lavamoat/webpack.

Is @lavamoat/webpack deprecated?

No, @lavamoat/webpack is actively maintained. Latest release: 2.2.4 (2026-06-25).

What are alternatives to @lavamoat/webpack?

Popular alternatives to @lavamoat/webpack in npm include: ?, debug, ansi-styles, semver, brace-expansion.

What license does @lavamoat/webpack use?

@lavamoat/webpack is licensed under Apache-2.0.

@lavamoat/webpack

npmv2.2.4

LavaMoat Webpack plugin for running dependencies in Compartments without eval

License Apache-2.0permissive43 versions3 maintainers7 deps

LavaMoat/lavamoat

/ 100

Health

use with caution

@lavamoat/[email protected] low health (61/100) — consider alternatives

Moderate health score (61/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

ses @lavamoat/aa @babel/parser lavamoat-core @lavamoat/types browser-resolve json-stable-stringify

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@lavamoat/webpack