npm · #4526

@npmcli/metavuln-calculator

10.0.0npm/metavuln-calculator ↗

Calculate meta-vulnerabilities from package security advisories

Last release 2 months ago
15 Jun 2026
Release timing varies
gaps range from 2 weeks to 8 months
Most releases are documented
notes for 20 of 26 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
27 releases · first in 2020

Release timeline

27 releases since 2020

202120222023202420252026

Releases

10.0.015 Jun 2026
Release notes
10.0.0 (2026-06-15)

⚠️ BREAKING CHANGES
- @npmcli/metavuln-calculator now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
- template-oss-apply
Features
- f2b9ecd #193 bump to new node engine range (@owlstronaut)
- 1f9f5ec #193 template-oss-apply (@owlstronaut)
Dependencies
- b526671 #193 [email protected]
- 6c9ce57 #193 [email protected]
- a115c50 #193 [email protected]
- 8c3ad12 #193 [email protected]
Chores
- df692a9 #193 test only supported versions in CI (@owlstronaut)
- 7312cba #193 @npmcli/[email protected] (@owlstronaut)
- 5065e32 #193 template-oss-apply (@owlstronaut)
- dfc6e9e #193 bumping @npmcli/template-oss from 4.30.0 to 5.1.0 (@owlstronaut)
- 8263abc bump @npmcli/eslint-config from 5.1.0 to 6.0.0 (#178) (@dependabot[bot])
- 248a4fe #184 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#184) (@dependabot[bot], @npm-cli-bot)
Open source →
Additional notes
⚠️ BREAKING CHANGES
- @npmcli/metavuln-calculator now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
- template-oss-apply
Features
- f2b9ecd #193 bump to new node engine range (@owlstronaut)
- 1f9f5ec #193 template-oss-apply (@owlstronaut)
Dependencies
- b526671 #193 [email protected]
- 6c9ce57 #193 [email protected]
- a115c50 #193 [email protected]
- 8c3ad12 #193 [email protected]
Chores
- df692a9 #193 test only supported versions in CI (@owlstronaut)
- 7312cba #193 @npmcli/[email protected] (@owlstronaut)
- 5065e32 #193 template-oss-apply (@owlstronaut)
- dfc6e9e #193 bumping @npmcli/template-oss from 4.30.0 to 5.1.0 (@owlstronaut)
- 8263abc bump @npmcli/eslint-config from 5.1.0 to 6.0.0 (#178) (@dependabot[bot])
- 248a4fe #184 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#184) (@dependabot[bot], @npm-cli-bot)
Open source →
9.0.323 Oct 2025
Release notes
9.0.3 (2025-10-23)

Dependencies
- f554afc #175 bump proc-log from 5.0.0 to 6.0.0 (#175) (@dependabot[bot])
- e20cd65 #176 bump json-parse-even-better-errors from 4.0.0 to 5.0.0 (#176) (@dependabot[bot])
Chores
- 617fd8c #174 bump @npmcli/template-oss from 4.26.0 to 4.27.1 (#174) (@dependabot[bot], @npm-cli-bot)
Open source →
Additional notes
Dependencies
- f554afc #175 bump proc-log from 5.0.0 to 6.0.0 (#175) (@dependabot[bot])
- e20cd65 #176 bump json-parse-even-better-errors from 4.0.0 to 5.0.0 (#176) (@dependabot[bot])
Chores
- 617fd8c #174 bump @npmcli/template-oss from 4.26.0 to 4.27.1 (#174) (@dependabot[bot], @npm-cli-bot)
Open source →
9.0.217 Sept 2025
Release notes
9.0.2 (2025-07-25)

Dependencies
- b603409 #170 bump cacache from 19.0.1 to 20.0.0 (#170) (@dependabot[bot])
Open source →
Additional notes
Dependencies
- b603409 #170 bump cacache from 19.0.1 to 20.0.0 (#170) (@dependabot[bot])
Open source →
9.0.116 Jul 2025
Release notes
9.0.1 (2025-07-16)

Bug Fixes
- 19e5506 #166 include prerelease versions in spec vulnerability testing (#166) (@Isolumi)
Chores
- 7b34977 #169 template-oss-apply for workflow flags (#169) (@wraithgar)
- 0449ac8 #164 postinstall workflow updates (#164) (@owlstronaut)
- 0f3e7ae #167 bump @npmcli/template-oss from 4.24.4 to 4.25.0 (#167) (@dependabot[bot], @npm-cli-bot)
Open source →
Additional notes
Bug Fixes
- 19e5506 #166 include prerelease versions in spec vulnerability testing (#166) (@Isolumi)
Chores
- 7b34977 #169 template-oss-apply for workflow flags (#169) (@wraithgar)
- 0449ac8 #164 postinstall workflow updates (#164) (@owlstronaut)
- 0f3e7ae #167 bump @npmcli/template-oss from 4.24.4 to 4.25.0 (#167) (@dependabot[bot], @npm-cli-bot)
Open source →
9.0.025 Nov 2024
Release notes
9.0.0 (2024-11-25)

⚠️ BREAKING CHANGES
- this module is now compatible with the following node versions: ^20.17.0 || >=22.9.0
Bug Fixes
- af594f0 update node engines to ^20.17.0 || >=22.9.0 (#159) (@wraithgar)
Dependencies
- f6e645c #161 [email protected] (#161)
Chores
- efcc950 #156 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#156) (@dependabot[bot], @npm-cli-bot)
Open source →
Additional notes
⚠️ BREAKING CHANGES
- this module is now compatible with the following node versions: ^20.17.0 || >=22.9.0
Bug Fixes
- af594f0 update node engines to ^20.17.0 || >=22.9.0 (#159) (@wraithgar)
Dependencies
- f6e645c #161 [email protected] (#161)
Chores
- efcc950 #156 bump @npmcli/template-oss from 4.23.3 to 4.23.4 (#156) (@dependabot[bot], @npm-cli-bot)
Open source →
8.0.117 Oct 2024
Release notes
8.0.1 (2024-10-17)

Dependencies
- c92af1b #157 bump pacote from ^19.0.0 to ^20.0.0 (#157)
Open source →
Additional notes
Dependencies
- c92af1b #157 bump pacote from ^19.0.0 to ^20.0.0 (#157)
Open source →
8.0.01 Oct 2024
Release notes
8.0.0 (2024-10-01)

⚠️ BREAKING CHANGES
- @npmcli/metavuln-calculator now supports node ^18.17.0 || >=20.5.0
Bug Fixes
- 76124e1 #152 align to npm 10 node engine range (@reggi)
Dependencies
- 397f279 #152 [email protected]
- 47f88c9 #152 [email protected]
- aefff63 #152 [email protected]
- 348ed6d #152 [email protected]
Chores
- a13b312 #152 run template-oss-apply (@reggi)
- 1db6387 #146 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])
- 5b3ccdf #147 postinstall for dependabot template-oss PR (@hashtagchris)
- 91ab93e #147 bump @npmcli/template-oss from 4.23.1 to 4.23.3 (@dependabot[bot])
Open source →
Additional notes
⚠️ BREAKING CHANGES
- @npmcli/metavuln-calculator now supports node ^18.17.0 || >=20.5.0
Bug Fixes
- 76124e1 #152 align to npm 10 node engine range (@reggi)
Dependencies
- 397f279 #152 [email protected]
- 47f88c9 #152 [email protected]
- aefff63 #152 [email protected]
- 348ed6d #152 [email protected]
Chores
- a13b312 #152 run template-oss-apply (@reggi)
- 1db6387 #146 bump @npmcli/eslint-config from 4.0.5 to 5.0.0 (@dependabot[bot])
- 5b3ccdf #147 postinstall for dependabot template-oss PR (@hashtagchris)
- 91ab93e #147 bump @npmcli/template-oss from 4.23.1 to 4.23.3 (@dependabot[bot])
Open source →
7.1.14 May 2024
Release notes
7.1.1 (2024-05-04)

Bug Fixes
- 1631d76 #134 linting: no-unused-vars (@lukekarrys)
Chores
- c506f88 #134 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)
- b81c6ed #134 postinstall for dependabot template-oss PR (@lukekarrys)
Open source →
Additional notes
Bug Fixes
- 1631d76 #134 linting: no-unused-vars (@lukekarrys)
Chores
- c506f88 #134 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)
- b81c6ed #134 postinstall for dependabot template-oss PR (@lukekarrys)
Open source →
7.1.016 Apr 2024
Release notes
7.1.0 (2024-04-16)

Features
- beb5c1f #132 emit timers with proc-log (@lukekarrys)
Dependencies
- 434f93e #132 [email protected]
Open source →
Additional notes
Features
- beb5c1f #132 emit timers with proc-log (@lukekarrys)
Dependencies
- 434f93e #132 [email protected]
Open source →
7.0.115 Apr 2024
Release notes
7.0.1 (2024-04-15)

Dependencies
- a23259a #131 bump pacote from 17.0.7 to 18.0.0 (#131) (@dependabot[bot])
Chores
- bd72803 #130 postinstall for dependabot template-oss PR (@lukekarrys)
- 290eb7c #130 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])
Open source →
Additional notes
Dependencies
- a23259a #131 bump pacote from 17.0.7 to 18.0.0 (#131) (@dependabot[bot])
Chores
- bd72803 #130 postinstall for dependabot template-oss PR (@lukekarrys)
- 290eb7c #130 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])
Open source →
7.0.015 Aug 2023
Release notes
7.0.0 (2023-08-15)

⚠️ BREAKING CHANGES
- support for node <=16.13 has been removed
Bug Fixes
- 071449d #99 drop node 16.13.x support (@lukekarrys)
Dependencies
- d5ba3e4 #101 bump pacote from 16.0.0 to 17.0.0
- 49e9861 #97 bump cacache from 17.1.4 to 18.0.0
Open source →
Additional notes
⚠️ BREAKING CHANGES
- support for node <=16.13 has been removed
Bug Fixes
- 071449d #99 drop node 16.13.x support (@lukekarrys)
Dependencies
- d5ba3e4 #101 bump pacote from 16.0.0 to 17.0.0
- 49e9861 #97 bump cacache from 17.1.4 to 18.0.0
Open source →
6.0.114 Aug 2023
Release notes
6.0.1 (2023-08-14)

Dependencies
- 907daf1 #93 bump pacote from 15.2.0 to 16.0.0
Open source →
Additional notes
Dependencies
- 907daf1 #93 bump pacote from 15.2.0 to 16.0.0
Open source →
6.0.014 Aug 2023
Release notes
6.0.0 (2023-08-14)

⚠️ BREAKING CHANGES
- support for node 14 has been removed
Bug Fixes
- 0e95702 #94 drop node14 support (@lukekarrys)
Open source →
Additional notes
⚠️ BREAKING CHANGES
- support for node 14 has been removed
Bug Fixes
- 0e95702 #94 drop node14 support (@lukekarrys)
Open source →
5.0.112 Apr 2023
Release notes
5.0.1 (2023-04-12)

Bug Fixes
- d89da3f #85 support packument without versions (#85) (@vigan-abd)
Open source →
Additional notes
Bug Fixes
- d89da3f #85 support packument without versions (#85) (@vigan-abd)
Open source →
5.0.013 Oct 2022
Release notes
5.0.0 (2022-10-13)

⚠️ BREAKING CHANGES
- this module no longer attempts to change file ownership automatically
Dependencies
- 56c1950 #69 bump cacache from 16.1.3 to 17.0.0 (#69)
- e31f928 #70 bump pacote from 14.0.0 to 15.0.0 (#70)
- 2154d72 #67 bump json-parse-even-better-errors from 2.3.1 to 3.0.0
Open source →
Additional notes
⚠️ BREAKING CHANGES
- this module no longer attempts to change file ownership automatically
Dependencies
- 56c1950 #69 bump cacache from 16.1.3 to 17.0.0 (#69)
- e31f928 #70 bump pacote from 14.0.0 to 15.0.0 (#70)
- 2154d72 #67 bump json-parse-even-better-errors from 2.3.1 to 3.0.0
Open source →
4.0.05 Oct 2022
Release notes
4.0.0 (2022-10-05)

Dependencies
- cfadd1b #63 remove pacote@14 prerelease ranges (#63)
Open source →
Additional notes
Dependencies
- cfadd1b #63 remove pacote@14 prerelease ranges (#63)
Open source →
4.0.0-pre.023 Sept 2022pre-release
Release notes
4.0.0-pre.0 (2022-09-23)

⚠️ BREAKING CHANGES
- @npmcli/metavuln-calculator is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0
Features
- a20ebd2 #55 postinstall for dependabot template-oss PR (@lukekarrys)
Dependencies
- cfb8511 #57 pacote@14||14.pre
Open source →
Additional notes
⚠️ BREAKING CHANGES
- @npmcli/metavuln-calculator is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0
Features
- a20ebd2 #55 postinstall for dependabot template-oss PR (@lukekarrys)
Dependencies
- cfb8511 #57 pacote@14||14.pre
Open source →
3.1.129 Jun 2022
Release notes
3.1.1 (2022-06-29)

Bug Fixes
- don't throw on invalid semver versions (#43) (7c9f14c)
Open source →
Additional notes
Bug Fixes
- don't throw on invalid semver versions (#43) (7c9f14c)
Open source →
3.1.04 Apr 2022
Release notes
3.1.0 (2022-04-04)

Features
- include cwe and cvss (#34) (5286f6b)
Open source →
Additional notes
Features
- include cwe and cvss (#34) (5286f6b)
3.0.1 (2022-03-14)

Dependencies
- bump cacache from 15.3.0 to 16.0.0 (#25) (6493a7e)
- update pacote requirement from ^13.0.1 to ^13.0.2 (#20) (94654bf)
- update pacote requirement from ^13.0.2 to ^13.0.3 (#23) (5be49ab)
Open source →
3.0.114 Mar 2022
Release notes
Dependencies
- bump cacache from 15.3.0 to 16.0.0 (#25) (6493a7e)
- update pacote requirement from ^13.0.1 to ^13.0.2 (#20) (94654bf)
- update pacote requirement from ^13.0.2 to ^13.0.3 (#23) (5be49ab)
Open source →
3.0.016 Feb 2022
Release notes2 sources agree
⚠ BREAKING CHANGES
- the options passed directly to pacote now take a silent option instead of log.loglevel
Dependencies
- bump pacote from 12.0.3 to 13.0.1 (#17) (b295177)
- update cacache requirement from ^15.0.5 to ^15.3.0 (#15) (1cd2f0a)
- update semver requirement from ^7.3.2 to ^7.3.5 (#14) (314da9b)
Open source →
2.0.05 Oct 2021
Nothing published for this version
1.1.126 Mar 2021
Nothing published for this version
1.1.018 Feb 2021
Nothing published for this version
1.0.215 Jan 2021
Nothing published for this version
1.0.114 Jan 2021
Nothing published for this version
1.0.016 Sept 2020
Nothing published for this version

@npmcli/metavuln-calculator

Release timeline

Releases

10.0.0 (2026-06-15)

⚠️ BREAKING CHANGES

Features

Dependencies

Chores

⚠️ BREAKING CHANGES

Features

Dependencies

Chores

9.0.3 (2025-10-23)

Dependencies

Chores

Dependencies

Chores

9.0.2 (2025-07-25)

Dependencies

Dependencies

9.0.1 (2025-07-16)

Bug Fixes

Chores

Bug Fixes

Chores

9.0.0 (2024-11-25)

⚠️ BREAKING CHANGES

Bug Fixes

Dependencies

Chores

⚠️ BREAKING CHANGES

Bug Fixes

Dependencies

Chores

8.0.1 (2024-10-17)

Dependencies

Dependencies

8.0.0 (2024-10-01)

⚠️ BREAKING CHANGES

Bug Fixes

Dependencies

Chores

⚠️ BREAKING CHANGES

Bug Fixes

Dependencies

Chores

7.1.1 (2024-05-04)

Bug Fixes

Chores

Bug Fixes

Chores

7.1.0 (2024-04-16)

Features

Dependencies

Features

Dependencies

7.0.1 (2024-04-15)

Dependencies

Chores

Dependencies

Chores

7.0.0 (2023-08-15)

⚠️ BREAKING CHANGES

Bug Fixes

Dependencies

⚠️ BREAKING CHANGES

Bug Fixes

Dependencies

6.0.1 (2023-08-14)

Dependencies

Dependencies

6.0.0 (2023-08-14)

⚠️ BREAKING CHANGES

Bug Fixes

⚠️ BREAKING CHANGES

Bug Fixes

5.0.1 (2023-04-12)

Bug Fixes

Bug Fixes

5.0.0 (2022-10-13)