Is @xpack/xpm-liquid safe to use?

@xpack/xpm-liquid has no known vulnerabilities on the latest version (2.2.1). DepScope rates its health at 57/100 (high risk).

What is the latest version of @xpack/xpm-liquid?

The latest version of @xpack/xpm-liquid is 2.2.1, released 2025-11-27.

Does @xpack/xpm-liquid have known vulnerabilities?

No known vulnerabilities on the latest version of @xpack/xpm-liquid.

Is @xpack/xpm-liquid deprecated?

No, @xpack/xpm-liquid is actively maintained. Latest release: 2.2.1 (2025-11-27).

What are alternatives to @xpack/xpm-liquid?

Popular alternatives to @xpack/xpm-liquid in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @xpack/xpm-liquid use?

@xpack/xpm-liquid is licensed under MIT.

@xpack/xpm-liquid

npmv2.2.1

A Node.js CommonJS/ES6 module with the Liquid substitutions code used by xpm & relatives

License MITpermissive12 versions1 maintainers2 deps490 weekly dl

xpack/xpm-liquid-ts

/ 100

Health

use with caution

@xpack/[email protected] low health (57/100) — consider alternatives

Moderate health score (57/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

liquidjs @xpack/logger

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@xpack/xpm-liquid