Skip to content
JS
Package

is-unsafe

Zero-dependency, DOM-free, pure predicate for detecting unsafe strings across HTML, XML, SVG, SQL, SHELL, and REGEX contexts

v2.0.2, 19 Aug 2026MITESM + CommonJSTypes: BundledSecurity
$ npm install is-unsafe

Key numbers

As of 25 Sept 2026
Weekly downloads
15.4m
- over 12 months
Gzip bundle size
-
No Bundlephobia data
Dependencies
0
Direct, from package.json
Last release
1 month ago
v2.0.2
GitHub stars
1
1 forks
Open issues / PRs
1 / 5
Contributors
-
Commits, last 52 weeks
9

Downloads

Last week 2026-09-15 to 2026-09-21
010m20m30mSept 2025Mar 2026Sept 2026High 20.4m (25 Aug 2026)Low 0 (23 Sept 2025)
Weekly npm downloads, one point per week, weeks starting 23 Sept 2025 to 15 Sept 2026. The y axis starts at zero.

15,399,355 downloads last week, 75,180,801 in the last month. No 52-week series has been fetched yet.

Releases, last 12 months
44 in total
Latest version
2.0.2, 19 Aug 20261 month ago
First published
11 Jun 2026
Last push to GitHub
18 Aug 202637 days before the snapshot
Repository archived
No
Open issues
1
Open pull requests
5
Commits, last 52 weeks
9
Dependents on npm
3

Major versions

  1. v2 first release 2.0.0, 11 Jul 2026
  2. v1 first release 1.0.0, 11 Jun 2026

Recent releases

VersionPublished
2.0.219 Aug 2026
2.0.011 Jul 2026
1.0.112 Jun 2026
1.0.011 Jun 2026
Module format
ESM + CommonJSFrom package.json type, main and exports fields
TypeScript types
Bundled
Node.js engine range
Not declared
Runtimes
-
Unpacked size (npm)
63 kB
Dependencies (0)
None
npm install is-unsafe

CDN

jsDelivr: 583.8k requests in 30 days
  • jsDelivrhttps://cdn.jsdelivr.net/npm/is-unsafe@2.0.2/
  • unpkghttps://unpkg.com/is-unsafe@2.0.2/
  • esm.shhttps://esm.sh/is-unsafe@2.0.2
Sources: npm registry, npm downloads API, GitHub API, jsDelivr. Data fetched 25 Sept 2026.

Indexability: Indexed.