Is conventional-changelog-conventionalcommits safe to use?

conventional-changelog-conventionalcommits has no known vulnerabilities on the latest version (9.3.1). DepScope rates its health at 78/100 (moderate risk).

What is the latest version of conventional-changelog-conventionalcommits?

The latest version of conventional-changelog-conventionalcommits is 9.3.1, released 2026-03-29.

Does conventional-changelog-conventionalcommits have known vulnerabilities?

No known vulnerabilities on the latest version of conventional-changelog-conventionalcommits.

Is conventional-changelog-conventionalcommits deprecated?

No, conventional-changelog-conventionalcommits is actively maintained. Latest release: 9.3.1 (2026-03-29).

What are alternatives to conventional-changelog-conventionalcommits?

Popular alternatives to conventional-changelog-conventionalcommits in npm include: minimatch, chalk, commander, picomatch, eslint-visitor-keys.

What license does conventional-changelog-conventionalcommits use?

conventional-changelog-conventionalcommits is licensed under ISC.

conventional-changelog-conventionalcommits

npmv9.3.1

Conventionalcommits.org preset for conventional-changelog.

License ISCpermissive32 versions3 maintainers1 deps9,462,944 weekly dl

conventional-changelog/conventional-changelog

/ 100

Health

safe to use

[email protected] is safe to use (health: 78/100)

Health breakdown0 – 100

20/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

5.7 KBminified

2.4 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

compare-func

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/conventional-changelog-conventionalcommits