Is pkg-dir safe to use?

pkg-dir has no known vulnerabilities on the latest version (9.0.0). DepScope rates its health at 49/100 (high risk).

What is the latest version of pkg-dir?

The latest version of pkg-dir is 9.0.0, released 2025-06-05.

Does pkg-dir have known vulnerabilities?

No known vulnerabilities on the latest version of pkg-dir.

Is pkg-dir deprecated?

Yes, pkg-dir is deprecated: Renamed to `package-directory`. Consider using ? instead.

What are alternatives to pkg-dir?

Popular alternatives to pkg-dir in npm include: ?, semver, debug, ansi-styles, minimatch.

pkg-dir

npmv9.0.0deprecated

Find the root directory of a Node.js project or npm package

License MITpermissive12 versions1 maintainers1 deps79,218,678 weekly dl

sindresorhus/pkg-dir

/ 100

Health

find alternative

pkg-dir is deprecated — find an alternative

Moderate health score (49/100) — verify manually
Package is deprecated

Health breakdown0 – 100

15/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.2 KBminified

0.6 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

OSS Scorecard

OpenSSF security posture score

3.8/10

weak

Maintainer trust

Active maintainers (3m)

Contributors (12m)

GitHub stars

0

Quality signals

OSS Criticality

0.77critical

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (1)

find-up-simple

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/pkg-dir