Is eventsource safe to use?

eventsource has no known vulnerabilities on the latest version (4.1.0). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of eventsource?

The latest version of eventsource is 4.1.0, released 2025-11-19.

Does eventsource have known vulnerabilities?

No known vulnerabilities on the latest version of eventsource.

Is eventsource deprecated?

No, eventsource is actively maintained. Latest release: 4.1.0 (2025-11-19).

What are alternatives to eventsource?

Popular alternatives to eventsource in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does eventsource use?

eventsource is licensed under MIT.

eventsource

npmv4.1.0

WhatWG/W3C compliant EventSource client for Node.js and browsers

License MITpermissive47 versions2 maintainers1 deps38,986,468 weekly dl

https://[email protected]/EventSource/eventsource

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

3/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

5.3 KBminified

2.2 KB gzipped

1 direct dependencies

ESM

🌟

TypeScript

10/10typed

bundled

Quality signals

OSS Criticality

0.77critical

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

Dependencies (1)

eventsource-parser

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/eventsource