</>PackageGraphPackageGraph

minimatch

npmv10.2.6TypeScript

a glob matcher in javascript

Safe to adopt

Yes — minimatch scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 44 days ago. 35 releases in the last 2 years.

  • ?Adoption: grade ?, Not reported by this registry.

    No download data reported for this package yet.

  • AMaintenance: grade A, Excellent.

    Last published 44 days ago. 35 releases in the last 2 years.

  • AWeight: grade A, Excellent.

    Pulls in 2 transitive packages, about 610 KB installed.

  • BSupply chain: grade B, Good.

    This package has a single maintainer (bus factor of 1).

  • ALicense: grade A, Excellent.

    BlueOak-1.0.0 — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding minimatch to a project.

1
Direct dependencies

Runtime packages this one declares itself.

2
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

610 KB
Install size

Unpacked size of this package plus its entire runtime tree.

2
Tree depth

Longest resolved dependency chain below this package.

Licenses in the dependency tree

MIT

Every license you inherit by installing minimatch, not just its own. Check this before a legal review, not after.

Compatibility

Node.js
node 18 || 20 || >=22
Module format
ESM + CommonJS
TypeScript
Types included
Install scripts
None

Quick start

A usage example from the minimatch README.

// hybrid module, load with require() or import
import { minimatch } from 'minimatch'
// or:
const { minimatch } = require('minimatch')

minimatch('bar.foo', '*.foo') // true!
minimatch('bar.foo', '*.bar') // false!
minimatch('bar.foo', '*.+(bar|foo)', { debug: true }) // true, and noisy!

Dependencies

Declared by minimatch v10.2.6. Runtime dependencies are installed with the package; dev dependencies are not.

Dev (8)

@types/node ^26.1.2mkdirp ^3.0.1oxlint ^1.76.0oxlint-tsgolint ^7.0.2001prettier ^3.9.6tap ^21.7.5tshy ^4.1.3typedoc ^0.28.20

Used by

Popular packages that depend on minimatch.

Relationship graph

Dependencies (left) and dependents (right) of minimatch.

Frequently installed together

Release history

35 releases in the last two years, typically about 0 days apart.

Recent versions of minimatch
VersionPublishedSizeLicense
10.2.6latest1 month ago524 KBBlueOak-1.0.0
10.2.55 months ago524 KBBlueOak-1.0.0
9.0.96 months ago465 KBISC
3.1.56 months ago37 KBISC
4.2.66 months ago39 KBISC
5.1.96 months ago41 KBISC
6.2.36 months ago239 KBISC
7.4.96 months ago378 KBISC
8.0.76 months ago459 KBISC
9.0.86 months ago465 KBISC
10.2.46 months ago523 KBBlueOak-1.0.0
3.1.46 months ago35 KBISC
4.2.56 months ago37 KBISC
5.1.86 months ago40 KBISC
6.2.26 months ago391 KBISC

Overview

minimatch is an npm package that a glob matcher in javascript. It has 10 known dependents in the graph. The latest version is 10.2.6, released under the BlueOak-1.0.0 license.

Who should use it

Teams working in the npm ecosystem who need a glob matcher in javascript and value a focused solution.

When not to use it

Consider an alternative if you need to or if a more actively-maintained option better fits your npm stack.

Pros

  • Ships TypeScript type definitions.
  • Clear open-source license (BlueOak-1.0.0).

Cons

  • No significant drawbacks detected from available metadata.

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

Funding

Frequently asked questions

Should I use minimatch?

Yes — minimatch scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 44 days ago. 35 releases in the last 2 years.

How do I install minimatch?

Run `npm install minimatch` to add minimatch to your npm project.

How many dependencies does minimatch have?

minimatch declares 9 direct dependencies and pulls in 2 packages in total once its runtime tree is resolved totalling about 610 KB on disk.

What license is minimatch released under?

minimatch is distributed under the BlueOak-1.0.0 license.

How popular is minimatch?

npm does not publish download counts. Within PackageGraph's crawl, 10 known packages depend on minimatch.

Is minimatch still maintained?

The most recent release of minimatch (v10.2.6) was published 1 month ago.

Does minimatch run install scripts?

No. minimatch does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.