Is resolve-pkg safe to use?

resolve-pkg has no known vulnerabilities on the latest version (3.0.1). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of resolve-pkg?

The latest version of resolve-pkg is 3.0.1, released 2026-02-12.

Does resolve-pkg have known vulnerabilities?

No known vulnerabilities on the latest version of resolve-pkg.

Is resolve-pkg deprecated?

No, resolve-pkg is actively maintained. Latest release: 3.0.1 (2026-02-12).

What are alternatives to resolve-pkg?

Popular alternatives to resolve-pkg in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does resolve-pkg use?

resolve-pkg is licensed under MIT.

resolve-pkg

npmv3.0.1

Resolve the path of a package regardless of it having an entry point

License MITpermissive6 versions1 maintainers1 deps1,670,247 weekly dl

sindresorhus/resolve-pkg

/ 100

Health

safe to use

[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.4 KBminified

0.8 KB gzipped

1 direct dependencies

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

find-up-simple

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/resolve-pkg