Is parse-npm-tarball-url safe to use?

parse-npm-tarball-url has no known vulnerabilities on the latest version (5.0.0). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of parse-npm-tarball-url?

The latest version of parse-npm-tarball-url is 5.0.0, released 2026-05-08.

Does parse-npm-tarball-url have known vulnerabilities?

No known vulnerabilities on the latest version of parse-npm-tarball-url.

Is parse-npm-tarball-url deprecated?

No, parse-npm-tarball-url is actively maintained. Latest release: 5.0.0 (2026-05-08).

What are alternatives to parse-npm-tarball-url?

Popular alternatives to parse-npm-tarball-url in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does parse-npm-tarball-url use?

parse-npm-tarball-url is licensed under MIT.

parse-npm-tarball-url

npmv5.0.0

Parse a tarball URL hosted in the npm registry

License MITpermissive9 versions1 maintainers1 deps134,027 weekly dl

pnpm/parse-npm-tarball-url

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

20/25

maintenance

14/20

popularity

25/25

security

12/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

24.7 KBminified

7.7 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

semver

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/parse-npm-tarball-url