Is @pact-foundation/pact safe to use?

@pact-foundation/pact has no known vulnerabilities on the latest version (17.0.1). DepScope rates its health at 84/100 (low risk).

What is the latest version of @pact-foundation/pact?

The latest version of @pact-foundation/pact is 17.0.1, released 2026-07-01.

Does @pact-foundation/pact have known vulnerabilities?

No known vulnerabilities on the latest version of @pact-foundation/pact.

Is @pact-foundation/pact deprecated?

No, @pact-foundation/pact is actively maintained. Latest release: 17.0.1 (2026-07-01).

What are alternatives to @pact-foundation/pact?

Popular alternatives to @pact-foundation/pact in npm include: ?, debug, ansi-styles, semver, brace-expansion.

What license does @pact-foundation/pact use?

@pact-foundation/pact is licensed under MIT.

@pact-foundation/pact

npmv17.0.1

Pact for all things Javascript

License MITpermissive215 versions5 maintainers16 deps678,840 weekly dl

pact-foundation/pact-js

/ 100

Health

safe to use

@pact-foundation/[email protected] is safe to use (health: 84/100)

Health breakdown0 – 100

20/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (16)

@pact-foundation/pact-core @scarf/scarf axios body-parser chalk express graphql graphql-tag http-proxy https-proxy-agent js-base64 lodash ramda randexp router stack-utils

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@pact-foundation/pact