Version 1.14.3 • License Apache-2.0
One-Line Verdict
"Heavy install size detected. Review bloat risk."
Caution
Actively Maintained
2 CVE History
Historical vulnerabilities found.
2.4 MB
Heavy: 2.4 MB
25,388,975
Highly Trusted
Package Payload
2 Direct
Clean dependency structure.
Cold-Start Impact
+36 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 2 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is @grpc/grpc-js too heavy? Compare it with these industry standards:
"gRPC Library for Node - pure JS implementation"
@grpc/grpc-js is used to facilitate high-performance Node.js workflows. It provides a robust footprint of 2.4 MB on disk.
# Install via NPM
npm install @grpc/grpc-js
# Install via Yarn
yarn add @grpc/grpc-js
You are currently viewing a proprietary security audit for @grpc/grpc-js on PAudit. We aggregate global databases to provide a safety rating of 65/100.
Run npm install @grpc/grpc-js. This installs version 1.14.3 and adds 2 direct dependencies to your project.
Yes, @grpc/grpc-js records 25,388,975 weekly downloads, making it a Highly Trusted part of the ecosystem.