Is eslint-plugin-prettier safe to use?

eslint-plugin-prettier has 1 known vulnerabilities on the latest version (5.5.6). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of eslint-plugin-prettier?

The latest version of eslint-plugin-prettier is 5.5.6, released 2026-05-28.

Does eslint-plugin-prettier have known vulnerabilities?

Yes. eslint-plugin-prettier has 1 known vulnerabilities. See depscope.dev/pkg/npm/eslint-plugin-prettier for details.

Is eslint-plugin-prettier deprecated?

No, eslint-plugin-prettier is actively maintained. Latest release: 5.5.6 (2026-05-28).

What are alternatives to eslint-plugin-prettier?

Popular alternatives to eslint-plugin-prettier in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does eslint-plugin-prettier use?

eslint-plugin-prettier is licensed under MIT.

eslint-plugin-prettier

npmv5.5.6

Runs prettier as an eslint rule

License MITpermissive59 versions6 maintainers2 deps41,731,367 weekly dl

prettier/eslint-plugin-prettier

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 6.0.0 to fix known vulnerabilities

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

20/20

popularity

20/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2025-54313	eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code	6.0.0

Bundle & TypeScript

📦

Bundle Size

24.6 KBminified

10.0 KB gzipped

2 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Threat intelligence

1 actively exploited (CISA KEV)

Threat tier per vulnerability derived from CISA KEV catalog + FIRST.org EPSS scores.

Quality signals

Download trend

growing(+17.7%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (2)

prettier-linter-helpers synckit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/eslint-plugin-prettier