sirv has no known vulnerabilities on the latest version (3.0.2). DepScope rates its health at 73/100 (moderate risk).

What is the latest version of sirv?

The latest version of sirv is 3.0.2, released 2025-09-03.

Does sirv have known vulnerabilities?

No known vulnerabilities on the latest version of sirv.

No, sirv is actively maintained. Latest release: 3.0.2 (2025-09-03).

What are alternatives to sirv?

Popular alternatives to sirv in npm include: ?, semver, minimatch, debug, brace-expansion.

sirv

npmv3.0.2

The optimized & lightweight middleware for serving requests to static assets

License MITpermissive50 versions1 maintainers3 deps29,784,845 weekly dl

lukeed/sirv

/ 100

Health

safe to use

[email protected] is safe to use (health: 73/100)

Health breakdown0 – 100

10/25

maintenance

20/20

popularity

25/25

security

12/15

maturity

6/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

14.3 KBminified

5.0 KB gzipped

3 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Download trend

stable(+3.2%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (3)

@polka/url mrmime totalist

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/sirv