pkg has 1 known vulnerabilities on the latest version (5.8.1). DepScope rates its health at 52/100 (high risk).

What is the latest version of pkg?

The latest version of pkg is 5.8.1, released 2023-03-08.

Does pkg have known vulnerabilities?

Yes. pkg has 1 known vulnerabilities. See depscope.dev/pkg/npm/pkg for details.

No, pkg is actively maintained. Latest release: 5.8.1 (2023-03-08).

What are alternatives to pkg?

Popular alternatives to pkg in npm include: ?, semver, minimatch, debug, brace-expansion.

pkg

npmv5.8.1

Package your Node.js project into an executable

License MITpermissive97 versions1 maintainers14 deps195,610 weekly dl

vercel/pkg

/ 100

Health

use with caution

[email protected] low health (52/100) — consider alternatives

Moderate health score (52/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

23/25

security

15/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2024-24828	Pkg Local Privilege Escalation	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (14)

@babel/generator @babel/parser @babel/types chalk fs-extra globby into-stream is-core-module minimist multistream pkg-fetch prebuild-install resolve stream-meter

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/pkg

pkg

npmv5.8.1

Package your Node.js project into an executable

License MITpermissive97 versions1 maintainers14 deps195,610 weekly dl

vercel/pkg

/ 100

Health

use with caution

[email protected] low health (52/100) — consider alternatives

Moderate health score (52/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

23/25

security

15/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2024-24828	Pkg Local Privilege Escalation	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (14)

@babel/generator @babel/parser @babel/types chalk fs-extra globby into-stream is-core-module minimist multistream pkg-fetch prebuild-install resolve stream-meter

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/pkg