Is @yarn-tool/ncu safe to use?

@yarn-tool/ncu has no known vulnerabilities on the latest version (3.0.9). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of @yarn-tool/ncu?

The latest version of @yarn-tool/ncu is 3.0.9, released 2026-04-26.

Does @yarn-tool/ncu have known vulnerabilities?

No known vulnerabilities on the latest version of @yarn-tool/ncu.

Is @yarn-tool/ncu deprecated?

No, @yarn-tool/ncu is actively maintained. Latest release: 3.0.9 (2026-04-26).

What are alternatives to @yarn-tool/ncu?

Popular alternatives to @yarn-tool/ncu in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does @yarn-tool/ncu use?

@yarn-tool/ncu is licensed under ISC.

@yarn-tool/ncu

npmv3.0.9

A wrapper tool for npm-check-updates that checks and updates package dependencies with semver support, version caching, and yarn.lock resolutions integration. Provides CLI options, table output, and efficient batch processing for monorepo workflows. 封裝 np

License ISCpermissive134 versions1 maintainers14 deps276 weekly dl

bluelovers/ws-yarn-workspaces

/ 100

Health

use with caution

@yarn-tool/[email protected] low health (60/100) — consider alternatives

Moderate health score (60/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

3/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (14)

@lazy-node/semver-simple-parse @ts-type/package-dts @yarn-tool/npm-package-arg-util @yarn-tool/pkg-version-query @yarn-tool/semver-diff @yarn-tool/table @yarn-tool/yargs-util @yarn-tool/yarnlock bluebird npm-check-updates package-json semver ts-type tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@yarn-tool/ncu