Is fhir-package-loader safe to use?

fhir-package-loader has no known vulnerabilities on the latest version (2.2.4). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of fhir-package-loader?

The latest version of fhir-package-loader is 2.2.4, released 2026-03-08.

Does fhir-package-loader have known vulnerabilities?

No known vulnerabilities on the latest version of fhir-package-loader.

Is fhir-package-loader deprecated?

No, fhir-package-loader is actively maintained. Latest release: 2.2.4 (2026-03-08).

What are alternatives to fhir-package-loader?

Popular alternatives to fhir-package-loader in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does fhir-package-loader use?

fhir-package-loader is licensed under Apache-2.0.

fhir-package-loader

npmv2.2.4

JavaScript package for downloading and accessing FHIR definitions

License Apache-2.0permissive21 versions3 maintainers14 deps9,405 weekly dl

FHIR/fhir-package-loader

/ 100

Health

use with caution

[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

5040.4 KBminified

698.7 KB gzipped

14 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (14)

axios chalk commander fhir-tool fs-extra https-proxy-agent lodash mnemonist semver sql.js tar tar-stream temp winston

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/fhir-package-loader