Is vega-parser safe to use?

vega-parser has no known vulnerabilities on the latest version (7.1.0). DepScope rates its health at 54/100 (high risk).

What is the latest version of vega-parser?

The latest version of vega-parser is 7.1.0, released 2025-09-16.

Does vega-parser have known vulnerabilities?

No known vulnerabilities on the latest version of vega-parser.

Is vega-parser deprecated?

No, vega-parser is actively maintained. Latest release: 7.1.0 (2025-09-16).

What are alternatives to vega-parser?

Popular alternatives to vega-parser in npm include: semver, debug, minimatch, strip-ansi, ms.

What license does vega-parser use?

vega-parser is licensed under BSD-3-Clause.

vega-parser

npmv7.1.0

Parse Vega specifications to runtime dataflows.

License BSD-3-Clausepermissive157 versions4 maintainers5 deps

vega/vega

/ 100

Health

safe to use

[email protected] is safe to use (health: 54/100)

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

253.9 KBminified

89.7 KB gzipped

5 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (5)

vega-util vega-scale vega-dataflow vega-functions vega-event-selector

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/vega-parser