Is auto-config-loader safe to use?

auto-config-loader has no known vulnerabilities on the latest version (3.0.4). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of auto-config-loader?

The latest version of auto-config-loader is 3.0.4, released 2026-03-19.

Does auto-config-loader have known vulnerabilities?

No known vulnerabilities on the latest version of auto-config-loader.

Is auto-config-loader deprecated?

No, auto-config-loader is actively maintained. Latest release: 3.0.4 (2026-03-19).

What are alternatives to auto-config-loader?

Popular alternatives to auto-config-loader in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does auto-config-loader use?

auto-config-loader is licensed under MIT.

auto-config-loader

npmv3.0.4

Find and load configuration from a package.json property, rc file, or CommonJS module.

License MITpermissive38 versions1 maintainers7 deps99,483 weekly dl

jaywcjlove/auto-config-loader

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

2118.9 KBminified

535.9 KB gzipped

7 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

ini jiti jsonc-eslint-parser lodash.merge sucrase toml-eslint-parser yaml-eslint-parser

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/auto-config-loader