Is @yarn-tool/pkg-version-query safe to use?

@yarn-tool/pkg-version-query has no known vulnerabilities on the latest version (3.0.9). DepScope rates its health at 57/100 (high risk).

What is the latest version of @yarn-tool/pkg-version-query?

The latest version of @yarn-tool/pkg-version-query is 3.0.9, released 2026-04-26.

Does @yarn-tool/pkg-version-query have known vulnerabilities?

No known vulnerabilities on the latest version of @yarn-tool/pkg-version-query.

Is @yarn-tool/pkg-version-query deprecated?

No, @yarn-tool/pkg-version-query is actively maintained. Latest release: 3.0.9 (2026-04-26).

What are alternatives to @yarn-tool/pkg-version-query?

Popular alternatives to @yarn-tool/pkg-version-query in npm include: ?, semver, debug, ansi-styles, brace-expansion.

What license does @yarn-tool/pkg-version-query use?

@yarn-tool/pkg-version-query is licensed under ISC.

@yarn-tool/pkg-version-query

npmv3.0.9

Query package versions from npm registry with LRU cache support. Supports version ranges, npm: protocol, and semver syntax handling. 從 npm registry 查詢套件版本，支援 LRU 快取、版本範圍語法與 npm: 協議處理。

License ISCpermissive69 versions1 maintainers8 deps

bluelovers/ws-yarn-workspaces

/ 100

Health

use with caution

@yarn-tool/[email protected] low health (57/100) — consider alternatives

Moderate health score (57/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (8)

@lazy-node/semver-ampersand @yarn-tool/npm-package-arg-util cache-path lru-cache-fs2 package-json semver ts-type tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@yarn-tool/pkg-version-query