Is keep-a-changelog safe to use?

keep-a-changelog has no known vulnerabilities on the latest version (3.0.2). DepScope rates its health at 70/100 (moderate risk).

What is the latest version of keep-a-changelog?

The latest version of keep-a-changelog is 3.0.2, released 2026-02-24.

No known vulnerabilities on the latest version of keep-a-changelog.

No, keep-a-changelog is actively maintained. Latest release: 3.0.2 (2026-02-24).

Popular alternatives to keep-a-changelog in npm include: ?., ansi-styles, debug, brace-expansion, strip-ansi.

keep-a-changelog is licensed under MIT.

npmv3.0.2

Parse and generate changelogs following the [keepachangelog](https://keepachangelog.com/) format.

License MITpermissive47 versions1 maintainers2 deps12,011 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 70/100)

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

3/15

community

Vulnerabilities

none known

🌟

0/10untyped

No type definitions available

Dependencies (2)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/keep-a-changelog