Version 25.0.3 • License MIT
One-Line Verdict
"Stable for production use."
Caution
Actively Maintained
2 CVE History
Historical vulnerabilities found.
291.1 KB
Light footprint.
2,315,856
Highly Trusted
Package Payload
28 Direct
Dependency Hell Risk: High chain complexity.
Cold-Start Impact
+4 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 2 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is semantic-release too heavy? Compare it with these industry standards:
"Automated semver compliant package publishing"
semantic-release is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 291.1 KB on disk.
# Install via NPM
npm install semantic-release
# Install via Yarn
yarn add semantic-release
You are currently viewing a proprietary security audit for semantic-release on PAudit. We aggregate global databases to provide a safety rating of 75/100.
Run npm install semantic-release. This installs version 25.0.3 and adds 28 direct dependencies to your project.
Yes, semantic-release records 2,315,856 weekly downloads, making it a Highly Trusted part of the ecosystem.