Is @react-pug/pug-lexer safe to use?

@react-pug/pug-lexer has no known vulnerabilities on the latest version (0.1.17). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of @react-pug/pug-lexer?

The latest version of @react-pug/pug-lexer is 0.1.17, released 2026-04-16.

No known vulnerabilities on the latest version of @react-pug/pug-lexer.

No, @react-pug/pug-lexer is actively maintained. Latest release: 0.1.17 (2026-04-16).

Popular alternatives to @react-pug/pug-lexer in npm include: minimatch, ansi-styles, debug, brace-expansion, strip-ansi.

@react-pug/pug-lexer is licensed under MIT.

npmv0.1.17

The pug lexer (takes a string and converts it to an array of tokens)

License MITpermissive2 versions1 maintainers3 deps651 weekly dl

/ 100

Health

safe to use

@react-pug/[email protected] is safe to use (health: 66/100)

Health breakdown0 – 100

25/25

maintenance

3/20

popularity

25/25

security

3/15

maturity

10/15

community

Vulnerabilities

none known

🌟

10/10typed

bundled

Dependencies (3)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@react-pug/pug-lexer