npm-check-updates
Find newer versions of dependencies than what your package.json allows
91%
Total Score
healthy
Long-term release activity and active development outweigh a concentrated contributor base and missing security policy.
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the concentrated recent commit activity carries more continuity risk than it would under organizational backing.
One contributor made about 86% of the 149 recent commits, while the next contributor made about 8%. Although five others were active, maintenance remains concentrated around one person.
The repository has no SECURITY.md or other security policy. That is a transparency and vulnerability-reporting gap, though it is partly offset by the repository's CodeQL and Dependabot tooling.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-736406 npm-check-updates is vulnerable to Terminal Escape Sequence Injection in versions 17.0.0 - 23.0.2. | 17.0.0 - 23.0.2 | Medium |
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 13 years ago
- Unpacked Size
- 5.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.