Is import-sync safe to use?

import-sync has no known vulnerabilities on the latest version (2.2.6). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of import-sync?

The latest version of import-sync is 2.2.6, released 2026-04-23.

Does import-sync have known vulnerabilities?

No known vulnerabilities on the latest version of import-sync.

Is import-sync deprecated?

No, import-sync is actively maintained. Latest release: 2.2.6 (2026-04-23).

What are alternatives to import-sync?

Popular alternatives to import-sync in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does import-sync use?

import-sync is licensed under MIT.

import-sync

npmv2.2.6

Synchronously import dynamic ECMAScript Modules similar to CommonJS require. Basic wrapper around esm for compatibility with both ESM and CJS projects in NodeJS.

License MITpermissive28 versions1 maintainers1 deps13,084 weekly dl

nktnet1/import-sync

/ 100

Health

safe to use

[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

esm-sync

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/import-sync