Is @ucanto/core safe to use?

@ucanto/core has no known vulnerabilities on the latest version (10.4.6). DepScope rates its health at 58/100 (high risk).

What is the latest version of @ucanto/core?

The latest version of @ucanto/core is 10.4.6, released 2025-10-27.

Does @ucanto/core have known vulnerabilities?

No known vulnerabilities on the latest version of @ucanto/core.

Is @ucanto/core deprecated?

No, @ucanto/core is actively maintained. Latest release: 10.4.6 (2025-10-27).

What are alternatives to @ucanto/core?

Popular alternatives to @ucanto/core in npm include: ?, semver, debug, minimatch.

What license does @ucanto/core use?

@ucanto/core is licensed under (Apache-2.0 AND MIT).

@ucanto/core

npmv10.4.6

ucanto core

License (Apache-2.0 AND MIT)permissive48 versions3 maintainers5 deps4,431 weekly dl

storacha/ucanto

/ 100

Health

use with caution

@ucanto/[email protected] low health (58/100) — consider alternatives

Moderate health score (58/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

@ipld/car @ipld/dag-cbor @ipld/dag-ucan multiformats @ucanto/interface

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@ucanto/core