Version 3.6.11 • License SEE LICENSE IN LICENSE
One-Line Verdict
"Heavy install size detected. Review bloat risk."
Caution
Actively Maintained
12 CVE History
Historical vulnerabilities found.
234.5 KB
Light footprint.
6,417
Niche adoption.
Package Payload
53 Direct
Dependency Hell Risk: High chain complexity.
Cold-Start Impact
+3 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 12 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is strapi too heavy? Compare it with these industry standards:
"An open source headless CMS solution to create and manage your own API. It provides a powerful dashboard and features to make your life easier. Databases supported: MongoDB, MySQL, MariaDB, PostgreSQL, SQLite"
strapi is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 234.5 KB on disk.
# Install via NPM
npm install strapi
# Install via Yarn
yarn add strapi
You are currently viewing a proprietary security audit for strapi on PAudit. We aggregate global databases to provide a safety rating of 65/100.
Run npm install strapi. This installs version 3.6.11 and adds 53 direct dependencies to your project.
Yes, strapi records 6,417 weekly downloads, making it a Niche adoption. part of the ecosystem.