Is @reliverse/matcha safe to use?

@reliverse/matcha has no known vulnerabilities on the latest version (2.3.4). DepScope rates its health at 48/100 (high risk).

What is the latest version of @reliverse/matcha?

The latest version of @reliverse/matcha is 2.3.4, released 2026-01-11.

Does @reliverse/matcha have known vulnerabilities?

No known vulnerabilities on the latest version of @reliverse/matcha.

Is @reliverse/matcha deprecated?

No, @reliverse/matcha is actively maintained. Latest release: 2.3.4 (2026-01-11).

What are alternatives to @reliverse/matcha?

Popular alternatives to @reliverse/matcha in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @reliverse/matcha use?

@reliverse/matcha is licensed under MIT.

@reliverse/matcha

npmv2.3.4

@reliverse/matcha is a high-performance minimal matcher, with micromatch-level power, zepto-level size, and reliverse-grade dx.

License MITpermissive7 versions1 maintainers2 deps14 weekly dl

/ 100

Health

use with caution

@reliverse/[email protected] low health (48/100) — consider alternatives

Moderate health score (48/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

8.8 KBminified

3.5 KB gzipped

2 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (2)

zeptomatch left-pad

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@reliverse/matcha