Is @bpmn-io/extract-process-variables safe to use?

@bpmn-io/extract-process-variables has no known vulnerabilities on the latest version (2.2.1). DepScope rates its health at 67/100 (moderate risk).

What is the latest version of @bpmn-io/extract-process-variables?

The latest version of @bpmn-io/extract-process-variables is 2.2.1, released 2026-02-27.

Does @bpmn-io/extract-process-variables have known vulnerabilities?

No known vulnerabilities on the latest version of @bpmn-io/extract-process-variables.

Is @bpmn-io/extract-process-variables deprecated?

No, @bpmn-io/extract-process-variables is actively maintained. Latest release: 2.2.1 (2026-02-27).

What are alternatives to @bpmn-io/extract-process-variables?

Popular alternatives to @bpmn-io/extract-process-variables in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @bpmn-io/extract-process-variables use?

@bpmn-io/extract-process-variables is licensed under MIT.

@bpmn-io/extract-process-variables

npmv2.2.1

A util for bpmn-js to extract Camunda BPM process variables from a BPMN 2.0 diagram.

License MITpermissive26 versions11 maintainers1 deps59,990 weekly dl

bpmn-io/extract-process-variables

/ 100

Health

use with caution

@bpmn-io/[email protected] low health (67/100) — consider alternatives

Moderate health score (67/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

min-dash

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@bpmn-io/extract-process-variables