Is @noble/post-quantum safe to use?

@noble/post-quantum has no known vulnerabilities on the latest version (0.6.1). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of @noble/post-quantum?

The latest version of @noble/post-quantum is 0.6.1, released 2026-04-12.

Does @noble/post-quantum have known vulnerabilities?

No known vulnerabilities on the latest version of @noble/post-quantum.

Is @noble/post-quantum deprecated?

No, @noble/post-quantum is actively maintained. Latest release: 0.6.1 (2026-04-12).

What are alternatives to @noble/post-quantum?

Popular alternatives to @noble/post-quantum in npm include: ?, semver, ansi-styles, brace-expansion, ms.

What license does @noble/post-quantum use?

@noble/post-quantum is licensed under MIT.

@noble/post-quantum

npmv0.6.1

Auditable & minimal JS implementation of post-quantum cryptography: FIPS 203, 204, 205, Falcon

License MITpermissive14 versions1 maintainers3 deps201,414 weekly dl

paulmillr/noble-post-quantum

/ 100

Health

use with caution

@noble/[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

14/20

popularity

25/25

security

9/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@noble/ciphers @noble/curves @noble/hashes

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@noble/post-quantum