Is @verdaccio/signature safe to use?

@verdaccio/signature has no known vulnerabilities on the latest version (8.0.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of @verdaccio/signature?

The latest version of @verdaccio/signature is 8.0.0, released 2026-04-22.

Does @verdaccio/signature have known vulnerabilities?

No known vulnerabilities on the latest version of @verdaccio/signature.

Is @verdaccio/signature deprecated?

No, @verdaccio/signature is actively maintained. Latest release: 8.0.0 (2026-04-22).

What are alternatives to @verdaccio/signature?

Popular alternatives to @verdaccio/signature in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @verdaccio/signature use?

@verdaccio/signature is licensed under MIT.

@verdaccio/signature

npmv8.0.0

Verdaccio Signature Utilities

License MITpermissive54 versions3 maintainers4 deps

verdaccio/verdaccio

/ 100

Health

safe to use

@verdaccio/[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@verdaccio/config @verdaccio/core jsonwebtoken debug

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@verdaccio/signature

@verdaccio/signature

npmv8.0.0

Verdaccio Signature Utilities

License MITpermissive54 versions3 maintainers4 deps

verdaccio/verdaccio

/ 100

Health

safe to use

@verdaccio/[email protected] is safe to use (health: 69/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@verdaccio/config @verdaccio/core jsonwebtoken debug

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@verdaccio/signature