Is posthtml-fetch safe to use?

posthtml-fetch has no known vulnerabilities on the latest version (4.0.3). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of posthtml-fetch?

The latest version of posthtml-fetch is 4.0.3, released 2025-06-24.

Does posthtml-fetch have known vulnerabilities?

No known vulnerabilities on the latest version of posthtml-fetch.

Is posthtml-fetch deprecated?

No, posthtml-fetch is actively maintained. Latest release: 4.0.3 (2025-06-24).

What are alternatives to posthtml-fetch?

Popular alternatives to posthtml-fetch in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does posthtml-fetch use?

posthtml-fetch is licensed under MIT.

posthtml-fetch

npmv4.0.3

PostHTML plugin for fetching and displaying remote or local content.

License MITpermissive19 versions2 maintainers6 deps37,631 weekly dl

posthtml/posthtml-fetch

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

209.0 KBminified

64.9 KB gzipped

6 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (6)

defu is-url ofetch posthtml posthtml-expressions posthtml-match-helper

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/posthtml-fetch