Is @xm721806280/mammoth safe to use?

@xm721806280/mammoth has no known vulnerabilities on the latest version (1.12.3-rc1). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of @xm721806280/mammoth?

The latest version of @xm721806280/mammoth is 1.12.3-rc1, released 2026-09-15.

Does @xm721806280/mammoth have known vulnerabilities?

No known vulnerabilities on the latest version of @xm721806280/mammoth.

Is @xm721806280/mammoth deprecated?

No, @xm721806280/mammoth is actively maintained. Latest release: 1.12.3-rc1 (2026-09-15).

What are alternatives to @xm721806280/mammoth?

Popular alternatives to @xm721806280/mammoth in npm include: ?, semver.

What license does @xm721806280/mammoth use?

@xm721806280/mammoth is licensed under BSD-2-Clause.

@xm721806280/mammoth

npmv1.12.3-rc1

Convert Word documents from docx to simple HTML and Markdown

License BSD-2-Clausepermissive7 versions1 maintainers10 deps

mwilliamson/mammoth.js

/ 100

Health

use with caution

@xm721806280/[email protected] low health (63/100) — consider alternatives

Moderate health score (63/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (10)

lop jszip argparse bluebird base64-js underscore xmlbuilder @xmldom/xmldom path-is-absolute dingbat-to-unicode

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@xm721806280/mammoth

@xm721806280/mammoth

npmv1.12.3-rc1

Convert Word documents from docx to simple HTML and Markdown

License BSD-2-Clausepermissive7 versions1 maintainers10 deps

mwilliamson/mammoth.js

/ 100

Health

use with caution

@xm721806280/[email protected] low health (63/100) — consider alternatives

Moderate health score (63/100) — verify manually

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (10)

lop jszip argparse bluebird base64-js underscore xmlbuilder @xmldom/xmldom path-is-absolute dingbat-to-unicode

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@xm721806280/mammoth