@woocommerce/datenpm
- latest 5.0.0
- licence GPL-2.0-or-later
- stars 10,504
- checked 6 days ago
- registry ↗
- repository ↗
Vulnerabilities, end of life and next steps
Check a specific version for known advisories, documented mitigations and evidence-backed earlier-version options. Maintenance health is separate from vulnerability status.
Review remediation options →Maintenance trends
Loading historical repository activity…
Signals · last 1 check
The first observation is recorded. Trend lines appear once at least two checks have data for the same signal.
Commits 90d
100
Open issues
1230
Unanswered
178
Contributors
40
What the project says about itself
- Build provenance — the latest release, 5.0.0, carries a signed provenance attestation. Source: the registry.
- Supported runtime — node ^24.15.0. Source: the registry.
- Publishers on the registry — 9. Source: the registry.
- Security policy — published. Source: the repository.
- Open milestones — 11.0.0 540/540 done; 11.1.0 580/580 done; 11.2.0 477/498 done. Source: the repository's milestones.
- OpenSSF Scorecard — 4 / 10 on 2026-08-24. Source: OpenSSF, via deps.dev. A third party's view of security practice, not part of the health score.
Third-party facts checked 6 days ago; registry facts on every crawl.
State history 1
| When | Change |
|---|---|
| 2026-09-12 | first verdict: active |
Licence history 1
| When | Change | Severity |
|---|---|---|
| 2026-09-12 | GPL-3.0-or-later → GPL-2.0-or-later (5.0.0) | info |
Badge
Drop this in your README. It re-renders itself as the verdict changes.
[](https://isitdeadyet.dev/npm/@woocommerce/date)Watch it
Get told when @woocommerce/date changes state, changes licence, or is deprecated — instead of finding out during an incident.
Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.