Is @sgarciac/bombadil safe to use?

@sgarciac/bombadil has no known vulnerabilities on the latest version (2.3.0). DepScope rates its health at 42/100 (high risk).

What is the latest version of @sgarciac/bombadil?

The latest version of @sgarciac/bombadil is 2.3.0, released 2019-04-04.

Does @sgarciac/bombadil have known vulnerabilities?

No known vulnerabilities on the latest version of @sgarciac/bombadil.

Is @sgarciac/bombadil deprecated?

No, @sgarciac/bombadil is actively maintained. Latest release: 2.3.0 (2019-04-04).

What are alternatives to @sgarciac/bombadil?

Popular alternatives to @sgarciac/bombadil in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @sgarciac/bombadil use?

@sgarciac/bombadil is licensed under Artistic-2.0.

@sgarciac/bombadil

npmv2.3.0

A TOML parser

License Artistic-2.016 versions1 maintainers5 deps124 weekly dl

/ 100

Health

use with caution

@sgarciac/[email protected] low health (42/100) — consider alternatives

Moderate health score (42/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

3/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

478.6 KBminified

120.3 KB gzipped

5 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

chevrotain lodash.every lodash.includes lodash.last moment

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@sgarciac/bombadil