Is @dotcom-tool-kit/npm safe to use?

@dotcom-tool-kit/npm has no known vulnerabilities on the latest version (5.0.1). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of @dotcom-tool-kit/npm?

The latest version of @dotcom-tool-kit/npm is 5.0.1, released 2026-01-15.

Does @dotcom-tool-kit/npm have known vulnerabilities?

No known vulnerabilities on the latest version of @dotcom-tool-kit/npm.

Is @dotcom-tool-kit/npm deprecated?

No, @dotcom-tool-kit/npm is actively maintained. Latest release: 5.0.1 (2026-01-15).

What are alternatives to @dotcom-tool-kit/npm?

Popular alternatives to @dotcom-tool-kit/npm in npm include: semver, minimatch, ansi-styles, debug, brace-expansion.

What license does @dotcom-tool-kit/npm use?

@dotcom-tool-kit/npm is licensed under ISC.

@dotcom-tool-kit/npm

npmv5.0.1

This plugin is for managing Tool Kit hooks that are run from npm scripts (such as `npm run test`).

License ISCpermissive170 versions3 maintainers9 deps578 weekly dl

financial-times/dotcom-tool-kit

/ 100

Health

use with caution

@dotcom-tool-kit/[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (9)

@dotcom-tool-kit/base @dotcom-tool-kit/error @dotcom-tool-kit/package-json-hook @dotcom-tool-kit/state libnpmpack libnpmpublish pacote tar tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@dotcom-tool-kit/npm