Is xml-crypto safe to use?

xml-crypto has no known vulnerabilities on the latest version (6.1.2). DepScope rates its health at 80/100 (low risk).

What is the latest version of xml-crypto?

The latest version of xml-crypto is 6.1.2, released 2025-04-24.

Does xml-crypto have known vulnerabilities?

No known vulnerabilities on the latest version of xml-crypto.

Is xml-crypto deprecated?

No, xml-crypto is actively maintained. Latest release: 6.1.2 (2025-04-24).

What are alternatives to xml-crypto?

Popular alternatives to xml-crypto in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does xml-crypto use?

xml-crypto is licensed under MIT.

xml-crypto

npmv6.1.2

Xml digital signature and encryption library for Node.js

License MITpermissive86 versions5 maintainers3 deps3,090,646 weekly dl

node-saml/xml-crypto

/ 100

Health

safe to use

[email protected] is safe to use (health: 80/100)

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

8/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

167.9 KBminified

46.8 KB gzipped

3 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/xml-crypto (DefinitelyTyped)

Quality signals

OSS Criticality

0.78critical

Health History

Dependency Tree

License Audit

Dependencies (3)

@xmldom/is-dom-node @xmldom/xmldom xpath

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/xml-crypto