Package

@keep-lts/xlsx

Security-maintained drop-in fork of xlsx. Back-ports SheetJS's fixes for CVE-2023-30533 (prototype pollution) and CVE-2024-22363 (ReDoS) onto the frozen npm 0.18.5 baseline. Original API unchanged.

v0.18.6, 11 Jun 2026Apache-2.0ESM + CommonJSTypes: BundledPDF and documents Security

$ npm install @keep-lts/xlsx

npm GitHub Homepage

Key numbers

As of 25 Sept 2026

Weekly downloads: 3.7k; - over 12 months
Gzip bundle size: -; No Bundlephobia data
Dependencies: 7; Direct, from package.json
Last release: 3 months ago; v0.18.6
GitHub stars: -
Open issues / PRs: - / -
Contributors: -
Commits, last 52 weeks: -

Downloads

No weekly download data in the snapshot.

3,678 downloads last week, 9,574 in the last month. No 52-week series has been fetched yet.

Maintenance

Releases, last 12 months: -
Latest version: 0.18.6, 11 Jun 20263 months ago
First published: -
Last push to GitHub: -
Repository archived: -
Open issues: -
Open pull requests: -
Commits, last 52 weeks: -
Dependents on npm: 0

Major versions

Recent releases

Compatibility

Module format: ESM + CommonJSFrom package.json type, main and exports fields
TypeScript types: Bundled
Node.js engine range: >=0.8
Runtimes: -
Unpacked size (npm): 7.2 MB
Dependencies (7): cfbssfwmfwordcrc-32adler-32codepage

Install

npm install @keep-lts/xlsx

CDN

jsDelivrhttps://cdn.jsdelivr.net/npm/@keep-lts/xlsx@0.18.6/
unpkghttps://unpkg.com/@keep-lts/xlsx@0.18.6/
esm.shhttps://esm.sh/@keep-lts/xlsx@0.18.6

Alternatives

Package	Weekly downloads	Gzip	Last release	Module	Comparison
exceljs-hardened Unofficial security-hardened fork of exceljs, patching known unpatched vulnerabilities in the upstream (unmaintained) project. Not affiliated with the original exceljs maintainers.	27.1k	-	1 month ago	CommonJS	-
xlsx SheetJS Spreadsheet data parser and writer	9.3m	-	4 years ago	ESM + CommonJS	-

Sources: npm registry, GitHub API. Data fetched 25 Sept 2026.

Indexability: Not indexed (discovery only): downloads_week 3678 < 10000.