Is config safe to use?

config has no known vulnerabilities on the latest version (4.4.1). DepScope rates its health at 91/100 (low risk).

What is the latest version of config?

The latest version of config is 4.4.1, released 2026-02-25.

Does config have known vulnerabilities?

No known vulnerabilities on the latest version of config.

Is config deprecated?

No, config is actively maintained. Latest release: 4.4.1 (2026-02-25).

What are alternatives to config?

Popular alternatives to config in npm include: ?, semver, minimatch, debug, brace-expansion.

config

npmv4.4.1

Configuration control for production node deployments

License MITpermissive129 versions3 maintainers1 deps1,712,792 weekly dl

node-config/node-config

/ 100

Health

safe to use

[email protected] is safe to use (health: 91/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

9/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

19.2 KBminified

6.6 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (1)

json5

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/config

config

npmv4.4.1

Configuration control for production node deployments

License MITpermissive129 versions3 maintainers1 deps1,712,792 weekly dl

node-config/node-config

/ 100

Health

safe to use

[email protected] is safe to use (health: 91/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

9/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

19.2 KBminified

6.6 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (1)

json5

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/config