Is @commitlint/cz-commitlint safe to use?

@commitlint/cz-commitlint has no known vulnerabilities on the latest version (20.5.2). DepScope rates its health at 83/100 (low risk).

What is the latest version of @commitlint/cz-commitlint?

The latest version of @commitlint/cz-commitlint is 20.5.2, released 2026-04-25.

Does @commitlint/cz-commitlint have known vulnerabilities?

No known vulnerabilities on the latest version of @commitlint/cz-commitlint.

Is @commitlint/cz-commitlint deprecated?

No, @commitlint/cz-commitlint is actively maintained. Latest release: 20.5.2 (2026-04-25).

What are alternatives to @commitlint/cz-commitlint?

Popular alternatives to @commitlint/cz-commitlint in npm include: semver, debug, minimatch, ansi-styles, brace-expansion.

What license does @commitlint/cz-commitlint use?

@commitlint/cz-commitlint is licensed under MIT.

@commitlint/cz-commitlint

npmv20.5.2

Commitizen adapter using the commitlint.config.js

License MITpermissive70 versions4 maintainers6 deps164,129 weekly dl

conventional-changelog/commitlint

/ 100

Health

safe to use

@commitlint/[email protected] is safe to use (health: 83/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

402.0 KBminified

121.2 KB gzipped

6 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (6)

@commitlint/ensure @commitlint/load @commitlint/types is-plain-obj picocolors word-wrap

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@commitlint/cz-commitlint