Is @carrot-foundation/ai-discovery safe to use?

@carrot-foundation/ai-discovery has no known vulnerabilities on the latest version (1.2.0). DepScope rates its health at 50/100 (high risk).

What is the latest version of @carrot-foundation/ai-discovery?

The latest version of @carrot-foundation/ai-discovery is 1.2.0, released 2026-05-13.

Does @carrot-foundation/ai-discovery have known vulnerabilities?

No known vulnerabilities on the latest version of @carrot-foundation/ai-discovery.

Is @carrot-foundation/ai-discovery deprecated?

No, @carrot-foundation/ai-discovery is actively maintained. Latest release: 1.2.0 (2026-05-13).

What are alternatives to @carrot-foundation/ai-discovery?

Popular alternatives to @carrot-foundation/ai-discovery in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does @carrot-foundation/ai-discovery use?

@carrot-foundation/ai-discovery is licensed under Apache-2.0.

@carrot-foundation/ai-discovery

npmv1.2.0

AI discovery primitives for the Carrot Network: JSON-LD, llms.txt, robots, and a Markdown mirror.

License Apache-2.0permissive5 versions4 maintainers3 deps467 weekly dl

carrot-foundation/ai-discovery

/ 100

Health

use with caution

@carrot-foundation/[email protected] low health (50/100) — consider alternatives

Moderate health score (50/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

3/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@modelcontextprotocol/sdk @orama/orama zod

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@carrot-foundation/ai-discovery