Is form-data safe to use?

form-data has no known vulnerabilities on the latest version (4.0.5). DepScope rates its health at 80/100 (low risk).

What is the latest version of form-data?

The latest version of form-data is 4.0.5, released 2025-11-17.

Does form-data have known vulnerabilities?

No known vulnerabilities on the latest version of form-data.

Is form-data deprecated?

No, form-data is actively maintained. Latest release: 4.0.5 (2025-11-17).

What are alternatives to form-data?

Popular alternatives to form-data in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does form-data use?

form-data is licensed under MIT.

form-data

npmv4.0.5

A library to create readable "multipart/form-data" streams. Can be used to submit forms and file uploads to other web applications.

License MITpermissive50 versions6 maintainers5 deps148,562,570 weekly dl

form-data/form-data

/ 100

Health

safe to use

[email protected] is safe to use (health: 80/100)

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.2 KBminified

0.2 KB gzipped

5 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

2

Primary author dominance

91%

GitHub stars

2,349

single active maintainer 3msingle author dominance

Quality signals

OSS Criticality

0.90critical

Download trend

stable(-0.1%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (5)

asynckit combined-stream es-set-tostringtag hasown mime-types

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/form-data