Is conventional-changelog-core safe to use?

conventional-changelog-core has no known vulnerabilities on the latest version (9.0.0). DepScope rates its health at 37/100 (critical risk).

What is the latest version of conventional-changelog-core?

The latest version of conventional-changelog-core is 9.0.0, released 2025-02-16.

Does conventional-changelog-core have known vulnerabilities?

No known vulnerabilities on the latest version of conventional-changelog-core.

Is conventional-changelog-core deprecated?

Yes, conventional-changelog-core is deprecated: Deprecated and no longer maintained. Please use conventional-changelog instead. Consider using ? instead.

What are alternatives to conventional-changelog-core?

Popular alternatives to conventional-changelog-core in npm include: ?, ansi-styles, brace-expansion, semver, ms.

What license does conventional-changelog-core use?

conventional-changelog-core is licensed under MIT.

conventional-changelog-core

npmv9.0.0deprecated

Core package of conventional-changelog.

License MITpermissive69 versions5 maintainers9 deps3,868,701 weekly dl

conventional-changelog/conventional-changelog

/ 100

Health

find alternative

conventional-changelog-core is deprecated — find an alternative

Moderate health score (37/100) — verify manually
Package is deprecated

Health breakdown0 – 100

5/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

7/10typed

Types from @types/conventional-changelog-core (DefinitelyTyped)

Quality signals

OSS Criticality

0.79critical

Health History

Dependency Tree

License Audit

Dependencies (9)

add-stream fd-package-json git-raw-commits git-semver-tags hosted-git-info normalize-package-data conventional-commits-parser @hutson/parse-repository-url conventional-changelog-writer

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/conventional-changelog-core