Is package-lock-only safe to use?

package-lock-only has no known vulnerabilities on the latest version (0.0.4). DepScope rates its health at 45/100 (high risk).

What is the latest version of package-lock-only?

The latest version of package-lock-only is 0.0.4, released 2018-06-17.

Does package-lock-only have known vulnerabilities?

No known vulnerabilities on the latest version of package-lock-only.

Is package-lock-only deprecated?

No, package-lock-only is actively maintained. Latest release: 0.0.4 (2018-06-17).

What are alternatives to package-lock-only?

Popular alternatives to package-lock-only in npm include: ?, minimatch, semver, ansi-styles, debug.

What license does package-lock-only use?

package-lock-only is licensed under ISC.

package-lock-only

npmv0.0.4

This is a test if it is possible to register a plugin with the same name as an npm install flag

License ISCpermissive4 versions1 maintainers1 deps4,195 weekly dl

/ 100

Health

use with caution

[email protected] low health (45/100) — consider alternatives

Moderate health score (45/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

chalk

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/package-lock-only