Is @yao-pkg/pkg safe to use?

@yao-pkg/pkg has no known vulnerabilities on the latest version (6.19.0). DepScope rates its health at 83/100 (low risk).

What is the latest version of @yao-pkg/pkg?

The latest version of @yao-pkg/pkg is 6.19.0, released 2026-04-24.

Does @yao-pkg/pkg have known vulnerabilities?

No known vulnerabilities on the latest version of @yao-pkg/pkg.

Is @yao-pkg/pkg deprecated?

No, @yao-pkg/pkg is actively maintained. Latest release: 6.19.0 (2026-04-24).

What are alternatives to @yao-pkg/pkg?

Popular alternatives to @yao-pkg/pkg in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @yao-pkg/pkg use?

@yao-pkg/pkg is licensed under MIT.

@yao-pkg/pkg

npmv6.19.0

Package your Node.js project into an executable

License MITpermissive51 versions1 maintainers19 deps181,107 weekly dl

yao-pkg/pkg

/ 100

Health

safe to use

@yao-pkg/[email protected] is safe to use (health: 83/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

4/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (19)

@babel/generator @babel/parser @babel/traverse @babel/types @roberts_lando/vfs @yao-pkg/pkg-fetch esbuild into-stream multistream picocolors picomatch postject prebuild-install resolve resolve.exports stream-meter tar tinyglobby unzipper

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@yao-pkg/pkg

@yao-pkg/pkg

npmv6.19.0

Package your Node.js project into an executable

License MITpermissive51 versions1 maintainers19 deps181,107 weekly dl

yao-pkg/pkg

/ 100

Health

safe to use

@yao-pkg/[email protected] is safe to use (health: 83/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

4/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (19)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@yao-pkg/pkg