Is @tonaljs/key safe to use?

@tonaljs/key has no known vulnerabilities on the latest version (4.11.2). DepScope rates its health at 59/100 (high risk).

What is the latest version of @tonaljs/key?

The latest version of @tonaljs/key is 4.11.2, released 2025-06-04.

Does @tonaljs/key have known vulnerabilities?

No known vulnerabilities on the latest version of @tonaljs/key.

Is @tonaljs/key deprecated?

No, @tonaljs/key is actively maintained. Latest release: 4.11.2 (2025-06-04).

What are alternatives to @tonaljs/key?

Popular alternatives to @tonaljs/key in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @tonaljs/key use?

@tonaljs/key is licensed under MIT.

@tonaljs/key

npmv4.11.2

Functions to work with musical keys

License MITpermissive44 versions1 maintainers3 deps10,355 weekly dl

/ 100

Health

use with caution

@tonaljs/[email protected] low health (59/100) — consider alternatives

Moderate health score (59/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

19.6 KBminified

5.7 KB gzipped

3 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@tonaljs/pitch-note @tonaljs/note @tonaljs/roman-numeral

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tonaljs/key