Is @slack/bolt safe to use?

@slack/bolt has no known vulnerabilities on the latest version (5.0.0). DepScope rates its health at 92/100 (low risk).

What is the latest version of @slack/bolt?

The latest version of @slack/bolt is 5.0.0, released 2026-07-15.

Does @slack/bolt have known vulnerabilities?

No known vulnerabilities on the latest version of @slack/bolt.

Is @slack/bolt deprecated?

No, @slack/bolt is actively maintained. Latest release: 5.0.0 (2026-07-15).

What are alternatives to @slack/bolt?

Popular alternatives to @slack/bolt in npm include: ?, debug, ansi-styles, semver, brace-expansion.

What license does @slack/bolt use?

@slack/bolt is licensed under MIT.

@slack/bolt

npmv5.0.0

A framework for building Slack apps, fast.

License MITpermissive125 versions12 maintainers9 deps3,156,145 weekly dl

slackapi/bolt-js

/ 100

Health

safe to use

@slack/[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (9)

@slack/logger @slack/oauth @slack/socket-mode @slack/types @slack/web-api express path-to-regexp raw-body tsscmp

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@slack/bolt

@slack/bolt

npmv5.0.0

A framework for building Slack apps, fast.

License MITpermissive125 versions12 maintainers9 deps3,156,145 weekly dl

slackapi/bolt-js

/ 100

Health

safe to use

@slack/[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (9)

@slack/logger @slack/oauth @slack/socket-mode @slack/types @slack/web-api express path-to-regexp raw-body tsscmp

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@slack/bolt