Is @depup/cacache safe to use?

@depup/cacache has no known vulnerabilities on the latest version (20.0.4-depup.2). DepScope rates its health at 47/100 (high risk).

What is the latest version of @depup/cacache?

The latest version of @depup/cacache is 20.0.4-depup.2, released 2026-04-06.

Does @depup/cacache have known vulnerabilities?

No known vulnerabilities on the latest version of @depup/cacache.

Is @depup/cacache deprecated?

No, @depup/cacache is actively maintained. Latest release: 20.0.4-depup.2 (2026-04-06).

What are alternatives to @depup/cacache?

Popular alternatives to @depup/cacache in npm include: ?, semver, ansi-styles, debug, strip-ansi.

What license does @depup/cacache use?

@depup/cacache is licensed under ISC.

@depup/cacache

npmv20.0.4-depup.2

Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache. (with updated dependencies)

License ISCpermissive4 versions1 maintainers10 deps7 weekly dl

npm/cacache

/ 100

Health

use with caution

@depup/[email protected] low health (47/100) — consider alternatives

Moderate health score (47/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (10)

@npmcli/fs fs-minipass glob lru-cache minipass minipass-collect minipass-flush minipass-pipeline p-map ssri

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@depup/cacache