Is @pnpm/core safe to use?

@pnpm/core has no known vulnerabilities on the latest version (1016.3.0). DepScope rates its health at 81/100 (low risk).

What is the latest version of @pnpm/core?

The latest version of @pnpm/core is 1016.3.0, released 2026-04-14.

Does @pnpm/core have known vulnerabilities?

No known vulnerabilities on the latest version of @pnpm/core.

Is @pnpm/core deprecated?

No, @pnpm/core is actively maintained. Latest release: 1016.3.0 (2026-04-14).

What are alternatives to @pnpm/core?

Popular alternatives to @pnpm/core in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @pnpm/core use?

@pnpm/core is licensed under MIT.

@pnpm/core

npmv1016.3.0

Fast, disk space efficient installation engine

License MITpermissive358 versions2 maintainers63 deps37,055 weekly dl

pnpm/pnpm

/ 100

Health

safe to use

@pnpm/[email protected] is safe to use (health: 81/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

11/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

2700.9 KBminified

836.0 KB gzipped

63 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (63)

ramda semver p-limit enquirer p-filter is-subdir run-groups @pnpm/error @pnpm/hoist @pnpm/types path-exists @pnpm/matcher is-inner-link @pnpm/headless load-json-file normalize-path @pnpm/constants @pnpm/lifecycle @pnpm/link-bins @zkochan/rimraf @pnpm/crypto.hash @pnpm/get-context @pnpm/hooks.types @pnpm/lockfile.fs @pnpm/remove-bins @pnpm/core-loggers @pnpm/modules-yaml @pnpm/build-modules @pnpm/resolver-base @pnpm/builder.policy @pnpm/calc-dep-state @pnpm/catalogs.types @pnpm/lockfile.utils @pnpm/manifest-utils @pnpm/dependency-path @pnpm/lockfile-to-pnp @pnpm/lockfile.pruner @pnpm/lockfile.walker @pnpm/modules-cleaner @pnpm/npm-package-arg @pnpm/parse-overrides @pnpm/patching.config @pnpm/read-modules-dir @pnpm/catalogs.resolver @pnpm/package-requester @pnpm/lockfile.filtering @pnpm/symlink-dependency @pnpm/util.lex-comparator @pnpm/crypto.object-hasher @pnpm/deps.graph-sequencer @pnpm/normalize-registries @pnpm/resolve-dependencies @pnpm/config.version-policy @pnpm/lockfile.verification @pnpm/read-project-manifest @pnpm/store-controller-types @pnpm/hooks.read-package-hook @pnpm/parse-wanted-dependency @pnpm/plugin-commands-rebuild @pnpm/catalogs.protocol-parser

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@pnpm/core