Is @sindresorhus/slugify safe to use?

@sindresorhus/slugify has no known vulnerabilities on the latest version (3.0.0). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of @sindresorhus/slugify?

The latest version of @sindresorhus/slugify is 3.0.0, released 2025-09-11.

Does @sindresorhus/slugify have known vulnerabilities?

No known vulnerabilities on the latest version of @sindresorhus/slugify.

Is @sindresorhus/slugify deprecated?

No, @sindresorhus/slugify is actively maintained. Latest release: 3.0.0 (2025-09-11).

What are alternatives to @sindresorhus/slugify?

Popular alternatives to @sindresorhus/slugify in npm include: ?, ansi-styles, brace-expansion, semver, ms.

What license does @sindresorhus/slugify use?

@sindresorhus/slugify is licensed under MIT.

@sindresorhus/slugify

npmv3.0.0

Slugify a string

License MITpermissive24 versions1 maintainers2 deps3,581,587 weekly dl

sindresorhus/slugify

/ 100

Health

use with caution

@sindresorhus/[email protected] low health (66/100) — consider alternatives

Moderate health score (66/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

35.6 KBminified

9.7 KB gzipped

2 direct dependencies

scoped

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.69high

Health History

Dependency Tree

License Audit

Dependencies (2)

@sindresorhus/transliterate escape-string-regexp

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@sindresorhus/slugify