Is tonal safe to use?

tonal has no known vulnerabilities on the latest version (6.4.3). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of tonal?

The latest version of tonal is 6.4.3, released 2026-01-18.

Does tonal have known vulnerabilities?

No known vulnerabilities on the latest version of tonal.

No, tonal is actively maintained. Latest release: 6.4.3 (2026-01-18).

What are alternatives to tonal?

Popular alternatives to tonal in npm include: ?, minimatch, ansi-styles, brace-expansion, semver.

tonal

npmv6.4.3

tonaljs music theory library

License MITpermissive93 versions1 maintainers23 deps10,498 weekly dl

tonaljs/tonal

/ 100

Health

use with caution

[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

41.2 KBminified

14.1 KB gzipped

23 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (23)

@tonaljs/abc-notation @tonaljs/array @tonaljs/chord-type @tonaljs/chord @tonaljs/collection @tonaljs/core @tonaljs/duration-value @tonaljs/interval @tonaljs/key @tonaljs/midi @tonaljs/mode @tonaljs/note

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/tonal