Is multimatch safe to use?

multimatch has no known vulnerabilities on the latest version (8.0.0). DepScope rates its health at 76/100 (moderate risk).

What is the latest version of multimatch?

The latest version of multimatch is 8.0.0, released 2026-02-20.

Does multimatch have known vulnerabilities?

No known vulnerabilities on the latest version of multimatch.

Is multimatch deprecated?

No, multimatch is actively maintained. Latest release: 8.0.0 (2026-02-20).

What are alternatives to multimatch?

Popular alternatives to multimatch in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does multimatch use?

multimatch is licensed under MIT.

multimatch

npmv8.0.0

Extends `minimatch.match()` with support for multiple patterns

License MITpermissive13 versions1 maintainers3 deps8,262,381 weekly dl

sindresorhus/multimatch

/ 100

Health

safe to use

[email protected] is safe to use (health: 76/100)

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

4/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

23.6 KBminified

8.5 KB gzipped

3 direct dependencies

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (3)

array-differ array-union minimatch

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/multimatch