Is xz-compat safe to use?

xz-compat has no known vulnerabilities on the latest version (1.2.10). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of xz-compat?

The latest version of xz-compat is 1.2.10, released 2026-09-12.

Does xz-compat have known vulnerabilities?

No known vulnerabilities on the latest version of xz-compat.

Is xz-compat deprecated?

No, xz-compat is actively maintained. Latest release: 1.2.10 (2026-09-12).

What are alternatives to xz-compat?

Popular alternatives to xz-compat in npm include: ?, minimatch, semver, ansi-styles, debug.

What license does xz-compat use?

xz-compat is licensed under MIT.

xz-compat

npmv1.2.10

XZ Decompression Library

License MITpermissive22 versions1 maintainers3 deps53,912 weekly dl

kmalakoff/xz-compat

/ 100

Health

safe to use

[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

os-shim extract-base-iterator install-module-linked-compat

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/xz-compat

xz-compat

npmv1.2.10

XZ Decompression Library

License MITpermissive22 versions1 maintainers3 deps53,912 weekly dl

kmalakoff/xz-compat

/ 100

Health

safe to use

[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

os-shim extract-base-iterator install-module-linked-compat

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/xz-compat