Is @endo/lockdown safe to use?

@endo/lockdown has no known vulnerabilities on the latest version (1.0.19). DepScope rates its health at 68/100 (moderate risk).

What is the latest version of @endo/lockdown?

The latest version of @endo/lockdown is 1.0.19, released 2026-04-16.

Does @endo/lockdown have known vulnerabilities?

No known vulnerabilities on the latest version of @endo/lockdown.

Is @endo/lockdown deprecated?

No, @endo/lockdown is actively maintained. Latest release: 1.0.19 (2026-04-16).

What are alternatives to @endo/lockdown?

Popular alternatives to @endo/lockdown in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @endo/lockdown use?

@endo/lockdown is licensed under Apache-2.0.

@endo/lockdown

npmv1.0.19

Wrappers for hardening JavaScript for Endo

License Apache-2.0permissive50 versions9 maintainers1 deps9,749 weekly dl

endojs/endo

/ 100

Health

use with caution

@endo/[email protected] low health (68/100) — consider alternatives

Moderate health score (68/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

ses

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@endo/lockdown