Version 3.10.4 • License MIT
One-Line Verdict
"Stable for production use."
Caution
Actively Maintained
13 CVE History
Historical vulnerabilities found.
227.3 KB
Light footprint.
1,216,424
Highly Trusted
Package Payload
2 Direct
Clean dependency structure.
Cold-Start Impact
+3 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 13 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is vm2 too heavy? Compare it with these industry standards:
"vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules."
vm2 is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 227.3 KB on disk.
# Install via NPM
npm install vm2
# Install via Yarn
yarn add vm2
You are currently viewing a proprietary security audit for vm2 on PAudit. We aggregate global databases to provide a safety rating of 75/100.
Run npm install vm2. This installs version 3.10.4 and adds 2 direct dependencies to your project.
Yes, vm2 records 1,216,424 weekly downloads, making it a Highly Trusted part of the ecosystem.