Is botframework-connector safe to use?

botframework-connector has no known vulnerabilities on the latest version (4.23.3). DepScope rates its health at 54/100 (high risk).

What is the latest version of botframework-connector?

The latest version of botframework-connector is 4.23.3, released 2025-08-27.

Does botframework-connector have known vulnerabilities?

No known vulnerabilities on the latest version of botframework-connector.

Is botframework-connector deprecated?

No, botframework-connector is actively maintained. Latest release: 4.23.3 (2025-08-27).

What are alternatives to botframework-connector?

Popular alternatives to botframework-connector in npm include: minimatch, ansi-styles, debug, brace-expansion, strip-ansi.

What license does botframework-connector use?

botframework-connector is licensed under MIT.

botframework-connector

npmv4.23.3

Bot Connector is autorest generated connector client.

License MITpermissive556 versions3 maintainers16 deps286,724 weekly dl

Microsoft/botbuilder-js

/ 100

Health

safe to use

[email protected] is safe to use (health: 54/100)

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

0/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

829.7 KBminified

218.9 KB gzipped

16 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (16)

zod axios buffer base64url node-fetch cross-fetch jsonwebtoken @azure/identity openssl-wrapper @azure/msal-node botbuilder-stdlib https-proxy-agent @types/jsonwebtoken botframework-schema rsa-pem-from-mod-exp @azure/core-rest-pipeline

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/botframework-connector