vega has no known vulnerabilities on the latest version (6.3.1). DepScope rates its health at 92/100 (low risk).

What is the latest version of vega?

The latest version of vega is 6.3.1, released 2026-07-22.

Does vega have known vulnerabilities?

No known vulnerabilities on the latest version of vega.

No, vega is actively maintained. Latest release: 6.3.1 (2026-07-22).

What are alternatives to vega?

Popular alternatives to vega in npm include: ?, semver, ansi-styles, brace-expansion, ms.

What license does vega use?

vega is licensed under BSD-3-Clause.

vega

npmv6.3.1

The Vega visualization grammar.

License BSD-3-Clausepermissive192 versions5 maintainers27 deps675,068 weekly dl

vega/vega

/ 100

Health

safe to use

[email protected] is safe to use (health: 92/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

13/15

community

0/15

popularity_floor

Vulnerabilities

Bundle & TypeScript

📦

Bundle Size

496.9 KBminified

173.8 KB gzipped

27 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (27)

vega-crossfilter vega-dataflow vega-encode vega-event-selector vega-expression vega-force vega-format vega-functions vega-geo vega-hierarchy vega-label vega-loader

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/vega