Is chroma-js safe to use?

chroma-js has no known vulnerabilities on the latest version (3.2.0). DepScope rates its health at 93/100 (low risk).

What is the latest version of chroma-js?

The latest version of chroma-js is 3.2.0, released 2025-11-28.

Does chroma-js have known vulnerabilities?

No known vulnerabilities on the latest version of chroma-js.

Is chroma-js deprecated?

No, chroma-js is actively maintained. Latest release: 3.2.0 (2025-11-28).

What are alternatives to chroma-js?

Popular alternatives to chroma-js in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does chroma-js use?

chroma-js is licensed under (BSD-3-Clause AND Apache-2.0).

chroma-js

npmv3.2.0

JavaScript library for color conversions

License (BSD-3-Clause AND Apache-2.0)permissive70 versions4 maintainers0 deps2,654,938 weekly dl

gka/chroma.js

/ 100

Health

safe to use

[email protected] is safe to use (health: 93/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

11/15

community

0/15

popularity_floor

Vulnerabilities

Bundle & TypeScript

📦

Bundle Size

40.3 KBminified

15.9 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/chroma-js (DefinitelyTyped)

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/chroma-js