Is style-format safe to use?

style-format has 1 known vulnerabilities on the latest version (0.0.1-security). DepScope rates its health at 37/100 (critical risk).

What is the latest version of style-format?

The latest version of style-format is 0.0.1-security, released 2016-03-23.

Does style-format have known vulnerabilities?

Yes. style-format has 1 known vulnerabilities. See depscope.dev/pkg/npm/style-format for details.

Is style-format deprecated?

No, style-format is actively maintained. Latest release: 0.0.1-security (2016-03-23).

What are alternatives to style-format?

Popular alternatives to style-format in npm include: ?, semver, debug, minimatch, ansi-styles.

What license does style-format use?

style-format is licensed under ISC.

style-format

npmv0.0.1-security

This package name is not currently in use, but was formerly occupied by a popular package. To avoid malicious use, npm is hanging on to the package name, but loosely, and we'll probably give it to you if you want it.

License ISCpermissive3 versions1 maintainers0 deps438 weekly dl

npm/security-holder

/ 100

Health

do not use

Do not install. Package is flagged as malicious (advisory MAL-2025-34115).

Health breakdown0 – 100

0/25

maintenance

3/20

popularity

15/25

security

15/15

maturity

4/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	MAL-2025-34115	Malicious code in style-format (npm)	—

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

⚠ Malicious package

This package is flagged as malicious by the OpenSSF/OSV community feed. Do not install.

Advisory: MAL-2025-34115 — Malicious code in style-format (npm)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/style-format