Is @hotwired/turbo safe to use?

@hotwired/turbo has no known vulnerabilities on the latest version (8.0.23). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of @hotwired/turbo?

The latest version of @hotwired/turbo is 8.0.23, released 2026-01-29.

Does @hotwired/turbo have known vulnerabilities?

No known vulnerabilities on the latest version of @hotwired/turbo.

Is @hotwired/turbo deprecated?

No, @hotwired/turbo is actively maintained. Latest release: 8.0.23 (2026-01-29).

What are alternatives to @hotwired/turbo?

Popular alternatives to @hotwired/turbo in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @hotwired/turbo use?

@hotwired/turbo is licensed under MIT.

@hotwired/turbo

npmv8.0.23

The speed of a single-page web application without having to write any JavaScript

License MITpermissive57 versions6 maintainers0 deps769,464 weekly dl

hotwired/turbo

/ 100

Health

safe to use

@hotwired/[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

15/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

7/10typed

Types from @types/hotwired__turbo (DefinitelyTyped)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@hotwired/turbo