Is @gitlab/gitlab-ai-provider safe to use?

@gitlab/gitlab-ai-provider has no known vulnerabilities on the latest version (4.1.0). DepScope rates its health at 34/100 (critical risk).

What is the latest version of @gitlab/gitlab-ai-provider?

The latest version of @gitlab/gitlab-ai-provider is 4.1.0, released 2026-03-01.

Does @gitlab/gitlab-ai-provider have known vulnerabilities?

No known vulnerabilities on the latest version of @gitlab/gitlab-ai-provider.

Is @gitlab/gitlab-ai-provider deprecated?

Yes, @gitlab/gitlab-ai-provider is deprecated: This package has moved to 'gitlab-ai-provider'. Please run: npm install gitlab-ai-provider Consider using ? instead.

What are alternatives to @gitlab/gitlab-ai-provider?

Popular alternatives to @gitlab/gitlab-ai-provider in npm include: ?, semver, minimatch, debug, ansi-styles.

What license does @gitlab/gitlab-ai-provider use?

@gitlab/gitlab-ai-provider is licensed under MIT.

@gitlab/gitlab-ai-provider

npmv4.1.0deprecated

GitLab Duo provider for Vercel AI SDK

License MITpermissive20 versions7 maintainers8 deps31,277 weekly dl

https://gitlab.com/gitlab-org/editor-extensions/gitlab-ai-provider

/ 100

Health

find alternative

@gitlab/gitlab-ai-provider is deprecated — find an alternative

Moderate health score (34/100) — verify manually
Package is deprecated

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (8)

zod openai isomorphic-ws @anycable/core vscode-jsonrpc graphql-request socket.io-client @anthropic-ai/sdk

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@gitlab/gitlab-ai-provider