Is colors safe to use?

colors has 1 known vulnerabilities on the latest version (1.4.0). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of colors?

The latest version of colors is 1.4.0, released 2019-09-22.

Does colors have known vulnerabilities?

Yes. colors has 1 known vulnerabilities. See depscope.dev/pkg/npm/colors for details.

Is colors deprecated?

No, colors is actively maintained. Latest release: 1.4.0 (2019-09-22).

What are alternatives to colors?

Popular alternatives to colors in npm include: ?, semver, minimatch, debug, brace-expansion.

colors

npmv1.4.0

get colors in your node.js console

License MITpermissive26 versions1 maintainers0 deps26,839,507 weekly dl

Marak/colors.js

/ 100

Health

do not use

colors: version matches a known historical supply-chain compromise. DO NOT install.

Check /api/versions for a safe release

Historical compromise KB matches current version (1 incident(s))

Health breakdown0 – 100

0/25

maintenance

20/20

popularity

20/25

security

15/15

maturity

7/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	GHSA-5rqg-jm4f-cqx7	Infinite loop causing Denial of Service in colors	—

Bundle & TypeScript

📦

Bundle Size

9.3 KBminified

4.1 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/colors (DefinitelyTyped)

Quality signals

Download trend

stable(+3%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/colors