Is @depup/iron-session safe to use?

@depup/iron-session has no known vulnerabilities on the latest version (8.0.4-depup.1). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of @depup/iron-session?

The latest version of @depup/iron-session is 8.0.4-depup.1, released 2026-07-21.

No known vulnerabilities on the latest version of @depup/iron-session.

No, @depup/iron-session is actively maintained. Latest release: 8.0.4-depup.1 (2026-07-21).

Popular alternatives to @depup/iron-session in npm include: ?, ansi-styles, semver, brace-expansion, ms.

@depup/iron-session is licensed under MIT.

npmv8.0.4-depup.1

Secure, stateless, and cookie-based session library for JavaScript (with updated dependencies)

License MITpermissive2 versions1 maintainers3 deps156 weekly dl

/ 100

Health

use with caution

@depup/[email protected] low health (63/100) — consider alternatives

Health breakdown0 – 100

25/25

maintenance

3/20

popularity

25/25

security

3/15

maturity

7/15

community

Vulnerabilities

none known

🌟

10/10typed

bundled

Dependencies (3)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@depup/iron-session