Is @lavamoat/lavapack safe to use?

@lavamoat/lavapack has no known vulnerabilities on the latest version (8.0.5). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of @lavamoat/lavapack?

The latest version of @lavamoat/lavapack is 8.0.5, released 2026-06-25.

Does @lavamoat/lavapack have known vulnerabilities?

No known vulnerabilities on the latest version of @lavamoat/lavapack.

Is @lavamoat/lavapack deprecated?

No, @lavamoat/lavapack is actively maintained. Latest release: 8.0.5 (2026-06-25).

What are alternatives to @lavamoat/lavapack?

Popular alternatives to @lavamoat/lavapack in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does @lavamoat/lavapack use?

@lavamoat/lavapack is licensed under MIT.

@lavamoat/lavapack

npmv8.0.5

LavaMoat packer

License MITpermissive76 versions3 maintainers8 deps20,366 weekly dl

LavaMoat/lavamoat

/ 100

Health

safe to use

@lavamoat/[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (8)

umd espree through2 JSONStream lavamoat-core readable-stream combine-source-map json-stable-stringify

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@lavamoat/lavapack