Is cool-path safe to use?

cool-path has 1 known vulnerabilities on the latest version (1.1.2). DepScope rates its health at 42/100 (high risk).

What is the latest version of cool-path?

The latest version of cool-path is 1.1.2, released 2021-02-24.

Does cool-path have known vulnerabilities?

Yes. cool-path has 1 known vulnerabilities. See depscope.dev/pkg/npm/cool-path for details.

Is cool-path deprecated?

No, cool-path is actively maintained. Latest release: 1.1.2 (2021-02-24).

What are alternatives to cool-path?

Popular alternatives to cool-path in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does cool-path use?

cool-path is licensed under MIT.

cool-path

npmv1.1.2

Path Matcher/Getter/Setter for Object/Array

License MITpermissive46 versions1 maintainers0 deps1,261 weekly dl

janryWang/cool-path

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (42/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

20/25

security

12/15

maturity

4/15

community

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2024-38985	depath and cool-path vulnerable to Prototype Pollution via `set()` Method	—

Bundle & TypeScript

📦

Bundle Size

33.6 KBminified

8.4 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/cool-path