Is @metric-im/componentry safe to use?

@metric-im/componentry has no known vulnerabilities on the latest version (1.4.7). DepScope rates its health at 54/100 (high risk).

What is the latest version of @metric-im/componentry?

The latest version of @metric-im/componentry is 1.4.7, released 2025-10-03.

Does @metric-im/componentry have known vulnerabilities?

No known vulnerabilities on the latest version of @metric-im/componentry.

Is @metric-im/componentry deprecated?

No, @metric-im/componentry is actively maintained. Latest release: 1.4.7 (2025-10-03).

What are alternatives to @metric-im/componentry?

Popular alternatives to @metric-im/componentry in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does @metric-im/componentry use?

@metric-im/componentry is licensed under MIT.

@metric-im/componentry

npmv1.4.7

Runtime framework for merging metric modules

License MITpermissive31 versions4 maintainers3 deps126 weekly dl

/ 100

Health

use with caution

@metric-im/[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

3/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (3)

express jsonic mongodb

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@metric-im/componentry