Is @uppy/core safe to use?

@uppy/core has no known vulnerabilities on the latest version (5.2.0). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of @uppy/core?

The latest version of @uppy/core is 5.2.0, released 2025-12-02.

Does @uppy/core have known vulnerabilities?

No known vulnerabilities on the latest version of @uppy/core.

Is @uppy/core deprecated?

No, @uppy/core is actively maintained. Latest release: 5.2.0 (2025-12-02).

What are alternatives to @uppy/core?

Popular alternatives to @uppy/core in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @uppy/core use?

@uppy/core is licensed under MIT.

@uppy/core

npmv5.2.0

Core module for the extensible JavaScript file upload widget with support for drag&drop, resumable uploads, previews, restrictions, file processing/encoding, remote providers like Instagram, Dropbox, Google Drive, S3 and more :dog:

License MITpermissive163 versions4 maintainers8 deps746,375 weekly dl

transloadit/uppy

/ 100

Health

safe to use

@uppy/[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

15/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

45.0 KBminified

15.7 KB gzipped

8 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (8)

lodash nanoid preact mime-match @uppy/utils namespace-emitter @uppy/store-default @transloadit/prettier-bytes

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@uppy/core