Is configstore safe to use?

configstore has no known vulnerabilities on the latest version (8.0.0). DepScope rates its health at 79/100 (moderate risk).

What is the latest version of configstore?

The latest version of configstore is 8.0.0, released 2026-01-24.

Does configstore have known vulnerabilities?

No known vulnerabilities on the latest version of configstore.

Is configstore deprecated?

No, configstore is actively maintained. Latest release: 8.0.0 (2026-01-24).

What are alternatives to configstore?

Popular alternatives to configstore in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does configstore use?

configstore is licensed under BSD-2-Clause.

configstore

npmv8.0.0

Easily load and save config without having to think about where and how

License BSD-2-Clausepermissive37 versions1 maintainers5 deps15,834,882 weekly dl

sindresorhus/configstore

/ 100

Health

safe to use

[email protected] is safe to use (health: 79/100)

Health breakdown0 – 100

15/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

4/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

9.7 KBminified

3.6 KB gzipped

5 direct dependencies

🌟

TypeScript

10/10typed

bundled

Quality signals

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (5)

atomically dot-prop graceful-fs is-safe-filename xdg-basedir

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/configstore