Is streamdown-prism safe to use?

streamdown-prism has no known vulnerabilities on the latest version (2.1.1). DepScope rates its health at 45/100 (high risk).

What is the latest version of streamdown-prism?

The latest version of streamdown-prism is 2.1.1, released 2026-02-12.

Does streamdown-prism have known vulnerabilities?

No known vulnerabilities on the latest version of streamdown-prism.

Is streamdown-prism deprecated?

No, streamdown-prism is actively maintained. Latest release: 2.1.1 (2026-02-12).

What are alternatives to streamdown-prism?

Popular alternatives to streamdown-prism in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does streamdown-prism use?

streamdown-prism is licensed under Apache-2.0.

streamdown-prism

npmv2.1.1

A minimal fork of streamdown using Prism instead of Shiki for syntax highlighting.

License Apache-2.0permissive2 versions1 maintainers16 deps22 weekly dl

larry-pan/streamdown-prism

/ 100

Health

use with caution

[email protected] low health (45/100) — consider alternatives

Moderate health score (45/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

407.8 KBminified

125.0 KB gzipped

16 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (16)

clsx hast-util-to-jsx-runtime html-url-attributes marked prism-react-renderer prismjs rehype-harden rehype-raw rehype-sanitize remark-gfm remark-parse remark-rehype remend tailwind-merge unified unist-util-visit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/streamdown-prism