Is @jorgsowa/php-parser safe to use?

@jorgsowa/php-parser has no known vulnerabilities on the latest version (3.2.5). DepScope rates its health at 54/100 (high risk).

What is the latest version of @jorgsowa/php-parser?

The latest version of @jorgsowa/php-parser is 3.2.5, released 2026-01-06.

Does @jorgsowa/php-parser have known vulnerabilities?

No known vulnerabilities on the latest version of @jorgsowa/php-parser.

Is @jorgsowa/php-parser deprecated?

No, @jorgsowa/php-parser is actively maintained. Latest release: 3.2.5 (2026-01-06).

What are alternatives to @jorgsowa/php-parser?

Popular alternatives to @jorgsowa/php-parser in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @jorgsowa/php-parser use?

@jorgsowa/php-parser is licensed under BSD-3-Clause.

@jorgsowa/php-parser

npmv3.2.5

Parse PHP code from JS and returns its AST

License BSD-3-Clausepermissive8 versions1 maintainers0 deps5,249 weekly dl

glayzzle/php-parser

/ 100

Health

use with caution

@jorgsowa/[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

119.2 KBminified

26.2 KB gzipped

0 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@jorgsowa/php-parser