Is @bpmn-io/extract-process-variables safe to use?

@bpmn-io/extract-process-variables has no known vulnerabilities on the latest version (2.2.1). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of @bpmn-io/extract-process-variables?

The latest version of @bpmn-io/extract-process-variables is 2.2.1, released 2026-02-27.

No known vulnerabilities on the latest version of @bpmn-io/extract-process-variables.

No, @bpmn-io/extract-process-variables is actively maintained. Latest release: 2.2.1 (2026-02-27).

Popular alternatives to @bpmn-io/extract-process-variables in npm include: semver, debug, minimatch, strip-ansi, lru-cache.

@bpmn-io/extract-process-variables is licensed under MIT.

npmv2.2.1

A util for bpmn-js to extract Camunda BPM process variables from a BPMN 2.0 diagram.

License MITpermissive26 versions12 maintainers1 deps

/ 100

Health

safe to use

@bpmn-io/[email protected] is safe to use (health: 62/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

🌟

0/10untyped

No type definitions available

Dependencies (1)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@bpmn-io/extract-process-variables