Is @spotlightjs/sidecar safe to use?

@spotlightjs/sidecar has no known vulnerabilities on the latest version (2.5.0). DepScope rates its health at 58/100 (high risk).

What is the latest version of @spotlightjs/sidecar?

The latest version of @spotlightjs/sidecar is 2.5.0, released 2025-11-10.

Does @spotlightjs/sidecar have known vulnerabilities?

No known vulnerabilities on the latest version of @spotlightjs/sidecar.

Is @spotlightjs/sidecar deprecated?

No, @spotlightjs/sidecar is actively maintained. Latest release: 2.5.0 (2025-11-10).

What are alternatives to @spotlightjs/sidecar?

Popular alternatives to @spotlightjs/sidecar in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @spotlightjs/sidecar use?

@spotlightjs/sidecar is licensed under Apache-2.0.

@spotlightjs/sidecar

npmv2.5.0

A small proxy server to capture and forward data from backend services to Spotlight.

License Apache-2.0permissive53 versions2 maintainers16 deps

/ 100

Health

safe to use

@spotlightjs/[email protected] is safe to use (health: 58/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (16)

zod hono yaml chalk logfmt uuidv7 @hono/mcp mcp-proxy fast-fuzzy eventsource @sentry/core @sentry/node launch-editor @hono/node-server @jridgewell/trace-mapping @modelcontextprotocol/sdk

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@spotlightjs/sidecar