Is url-parse-lax safe to use?

url-parse-lax has no known vulnerabilities on the latest version (6.0.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of url-parse-lax?

The latest version of url-parse-lax is 6.0.0, released 2025-09-07.

Does url-parse-lax have known vulnerabilities?

No known vulnerabilities on the latest version of url-parse-lax.

Is url-parse-lax deprecated?

No, url-parse-lax is actively maintained. Latest release: 6.0.0 (2025-09-07).

What are alternatives to url-parse-lax?

Popular alternatives to url-parse-lax in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does url-parse-lax use?

url-parse-lax is licensed under MIT.

url-parse-lax

npmv6.0.0

Lax URL parsing with support for protocol-less URLs and IPs

License MITpermissive6 versions1 maintainers1 deps6,835,134 weekly dl

sindresorhus/url-parse-lax

/ 100

Health

use with caution

[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.1 KBminified

0.6 KB gzipped

1 direct dependencies

🌟

TypeScript

7/10typed

Types from @types/url-parse-lax (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (1)

prepend-http

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/url-parse-lax