NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #4526 most downloaded on npm
Calculate meta-vulnerabilities from package security advisories
Last release 3 months ago
15 Jun 2026
Release timing varies
gaps range from 2 weeks to 8 months
Most releases are documented
notes for 20 of 26 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
27 releases · first in 2020
One column per quarter.
@npmcli/metavuln-calculator now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
@npmcli/metavuln-calculator now supports node ^22.22.2 || ^24.15.0 || >=26.0.0f2b9ecd #193 bump to new node engine range (@owlstronaut)1f9f5ec #193 template-oss-apply (@owlstronaut)b526671 #193 proc-log@7.0.06c9ce57 #193 json-parse-even-better-errors@6.0.0a115c50 #193 pacote@22.0.08c3ad12 #193 cacache@21.0.1df692a9 #193 test only supported versions in CI (@owlstronaut)7312cba #193 @npmcli/eslint-config@7.0.0 (@owlstronaut)5065e32 #193 template-oss-apply (@owlstronaut)dfc6e9e #193 bumping @npmcli/template-oss from 4.30.0 to 5.1.0 (@owlstronaut)8263abc bump @npmcli/eslint-config from 5.1.0 to 6.0.0 (#178) (@dependabot[bot])248a4fe #184 bump @npmcli/template-oss from 4.29.0 to 4.30.0 (#184) (@dependabot[bot], @npm-cli-bot)`f554afc` #175 bump proc-log from 5.0.0 to 6.0.0 (#175) (@dependabot[bot])
`b603409` #170 bump cacache from 19.0.1 to 20.0.0 (#170) (@dependabot[bot])
`19e5506` #166 include prerelease versions in spec vulnerability testing (#166) (@Isolumi)
this module is now compatible with the following node versions: ^20.17.0 || >=22.9.0
`c92af1b` #157 bump pacote from ^19.0.0 to ^20.0.0
@npmcli/metavuln-calculator now supports node ^18.17.0 || >=20.5.0
`1631d76` #134 linting: no-unused-vars (@lukekarrys)
`a23259a` #131 bump pacote from 17.0.7 to 18.0.0 (#131) (@dependabot[bot])
support for node <=16.13 has been removed
`907daf1` #93 bump pacote from 15.2.0 to 16.0.0
support for node 14 has been removed
`d89da3f` #85 support packument without versions (#85) (@vigan-abd)
this module no longer attempts to change file ownership automatically
`cfadd1b` #63 remove pacote@14 prerelease ranges
@npmcli/metavuln-calculator is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0
@npmcli/metavuln-calculator is now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0don't throw on invalid semver versions
## 3.1.0 (2022-04-04) ### Features * include cwe and cvss
the options passed directly to pacote now take a silent option instead of log.loglevel
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →