Is npm-programmatic safe to use?

npm-programmatic has 1 known vulnerabilities on the latest version (0.0.12). DepScope rates its health at 35/100 (critical risk).

What is the latest version of npm-programmatic?

The latest version of npm-programmatic is 0.0.12, released 2019-04-27.

Does npm-programmatic have known vulnerabilities?

Yes. npm-programmatic has 1 known vulnerabilities. See depscope.dev/pkg/npm/npm-programmatic for details.

Is npm-programmatic deprecated?

No, npm-programmatic is actively maintained. Latest release: 0.0.12 (2019-04-27).

What are alternatives to npm-programmatic?

Popular alternatives to npm-programmatic in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does npm-programmatic use?

npm-programmatic is licensed under ISC.

npm-programmatic

npmv0.0.12

Use NPM commands programmatically

License ISCpermissive12 versions1 maintainers1 deps3,350 weekly dl

Manak/npm-programmatic

/ 100

Health

do not use

npm-programmatic has critical vulnerabilities — do not use

Moderate health score (35/100) — verify manually
1 critical vulnerabilities

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

15/25

security

12/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	CVE-2020-7614	Command Injection in npm-programmatic	—

Bundle & TypeScript

📦

Bundle Size

79.1 KBminified

22.3 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

bluebird

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/npm-programmatic