Is @trustnxt/c2pa-ts safe to use?

@trustnxt/c2pa-ts has no known vulnerabilities on the latest version (0.14.0). DepScope rates its health at 58/100 (high risk).

What is the latest version of @trustnxt/c2pa-ts?

The latest version of @trustnxt/c2pa-ts is 0.14.0, released 2026-04-21.

Does @trustnxt/c2pa-ts have known vulnerabilities?

No known vulnerabilities on the latest version of @trustnxt/c2pa-ts.

Is @trustnxt/c2pa-ts deprecated?

No, @trustnxt/c2pa-ts is actively maintained. Latest release: 0.14.0 (2026-04-21).

What are alternatives to @trustnxt/c2pa-ts?

Popular alternatives to @trustnxt/c2pa-ts in npm include: ?, semver, debug, minimatch.

What license does @trustnxt/c2pa-ts use?

@trustnxt/c2pa-ts is licensed under Apache-2.0.

@trustnxt/c2pa-ts

npmv0.14.0

Pure TypeScript implementation of C2PA manifest reading, validation, and creation

License Apache-2.0permissive26 versions2 maintainers8 deps938 weekly dl

TrustNXT/c2pa-ts

/ 100

Health

use with caution

@trustnxt/[email protected] low health (58/100) — consider alternatives

Moderate health score (58/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

12/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (8)

@noble/hashes @peculiar/x509 cbor-x crc-32 pkijs schema-dts typed-binary uuid

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@trustnxt/c2pa-ts