Is @salesforce/core-bundle safe to use?

@salesforce/core-bundle has no known vulnerabilities on the latest version (8.21.0). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of @salesforce/core-bundle?

The latest version of @salesforce/core-bundle is 8.21.0, released 2025-08-21.

Does @salesforce/core-bundle have known vulnerabilities?

No known vulnerabilities on the latest version of @salesforce/core-bundle.

Is @salesforce/core-bundle deprecated?

No, @salesforce/core-bundle is actively maintained. Latest release: 8.21.0 (2025-08-21).

What are alternatives to @salesforce/core-bundle?

Popular alternatives to @salesforce/core-bundle in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does @salesforce/core-bundle use?

@salesforce/core-bundle is licensed under BSD-3-Clause.

@salesforce/core-bundle

npmv8.21.0

Core libraries to interact with SFDX projects, orgs, and APIs.

License BSD-3-Clausepermissive83 versions7 maintainers19 deps220 weekly dl

forcedotcom/sfdx-core

/ 100

Health

use with caution

@salesforce/[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

15/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (19)

ajv faye pino jszip memfs semver form-data change-case pino-pretty js2xmlparser jsonwebtoken @salesforce/kit proper-lockfile fast-levenshtein ts-retry-promise @salesforce/schemas @salesforce/ts-types @jsforce/jsforce-node pino-abstract-transport

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@salesforce/core-bundle