Is @tonaljs/core safe to use?

@tonaljs/core has no known vulnerabilities on the latest version (5.0.2). DepScope rates its health at 54/100 (high risk).

What is the latest version of @tonaljs/core?

The latest version of @tonaljs/core is 5.0.2, released 2025-01-03.

Does @tonaljs/core have known vulnerabilities?

No known vulnerabilities on the latest version of @tonaljs/core.

Is @tonaljs/core deprecated?

No, @tonaljs/core is actively maintained. Latest release: 5.0.2 (2025-01-03).

What are alternatives to @tonaljs/core?

Popular alternatives to @tonaljs/core in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @tonaljs/core use?

@tonaljs/core is licensed under MIT.

@tonaljs/core

npmv5.0.2

Music theory library

License MITpermissive24 versions1 maintainers4 deps12,895 weekly dl

/ 100

Health

use with caution

@tonaljs/[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

11.4 KBminified

3.1 KB gzipped

4 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@tonaljs/pitch @tonaljs/pitch-interval @tonaljs/pitch-distance @tonaljs/pitch-note

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tonaljs/core