Is dayjs safe to use?

dayjs has no known vulnerabilities on the latest version (1.11.23). DepScope rates its health at 95/100 (low risk).

What is the latest version of dayjs?

The latest version of dayjs is 1.11.23, released 2026-08-17.

Does dayjs have known vulnerabilities?

No known vulnerabilities on the latest version of dayjs.

No, dayjs is actively maintained. Latest release: 1.11.23 (2026-08-17).

What are alternatives to dayjs?

Popular alternatives to dayjs in npm include: ?, semver, minimatch, ansi-styles, brace-expansion.

dayjs

npmv1.11.23

2KB immutable date time library alternative to Moment.js with the same modern API

License MITpermissive136 versions1 maintainers0 deps42,406,406 weekly dl

iamkun/dayjs

/ 100

Health

safe to use

[email protected] is safe to use (health: 95/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

7.0 KBminified

3.0 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.75critical

Download trend

declining(-22.5%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/dayjs

dayjs

npmv1.11.23

2KB immutable date time library alternative to Moment.js with the same modern API

License MITpermissive136 versions1 maintainers0 deps42,406,406 weekly dl

iamkun/dayjs

/ 100

Health

safe to use

[email protected] is safe to use (health: 95/100)

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

7.0 KBminified

3.0 KB gzipped

0 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.75critical

Download trend

declining(-22.5%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/dayjs