Is expressive-code safe to use?

expressive-code has no known vulnerabilities on the latest version (0.41.7). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of expressive-code?

The latest version of expressive-code is 0.41.7, released 2026-02-23.

Does expressive-code have known vulnerabilities?

No known vulnerabilities on the latest version of expressive-code.

Is expressive-code deprecated?

No, expressive-code is actively maintained. Latest release: 0.41.7 (2026-02-23).

What are alternatives to expressive-code?

Popular alternatives to expressive-code in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does expressive-code use?

expressive-code is licensed under MIT.

expressive-code

npmv0.41.7

A text marking & annotation engine for presenting source code on the web.

License MITpermissive97 versions1 maintainers4 deps

expressive-code/expressive-code

/ 100

Health

safe to use

[email protected] is safe to use (health: 62/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@expressive-code/core @expressive-code/plugin-frames @expressive-code/plugin-shiki @expressive-code/plugin-text-markers

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/expressive-code