Is resolve-pkg safe to use?

resolve-pkg has no known vulnerabilities on the latest version (3.0.1). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of resolve-pkg?

The latest version of resolve-pkg is 3.0.1, released 2026-02-12.

Does resolve-pkg have known vulnerabilities?

No known vulnerabilities on the latest version of resolve-pkg.

Is resolve-pkg deprecated?

No, resolve-pkg is actively maintained. Latest release: 3.0.1 (2026-02-12).

What are alternatives to resolve-pkg?

Popular alternatives to resolve-pkg in npm include: ?, semver, debug, minimatch, lru-cache.

What license does resolve-pkg use?

resolve-pkg is licensed under MIT.

resolve-pkg

npmv3.0.1

Resolve the path of a package regardless of it having an entry point

License MITpermissive6 versions1 maintainers1 deps1,645,840 weekly dl

sindresorhus/resolve-pkg

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (1)

find-up-simple

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/resolve-pkg