</>PackageGraphPackageGraph

semver

npmv7.8.5

The semantic version parser used by npm.

Safe to adopt

Yes — semver scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 82 days ago. 11 releases in the last 2 years.

  • ?Adoption: grade ?, Not reported by this registry.

    No download data reported for this package yet.

  • AMaintenance: grade A, Excellent.

    Last published 82 days ago. 11 releases in the last 2 years.

  • AWeight: grade A, Excellent.

    Zero runtime dependencies, about 99 KB installed.

  • ASupply chain: grade A, Excellent.

    No install scripts, 4 maintainers, and a contained dependency surface.

  • ALicense: grade A, Excellent.

    ISC — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding semver to a project.

0
Direct dependencies

Runtime packages this one declares itself.

0
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

99 KB
Install size

Unpacked size of this package plus its entire runtime tree.

Tree depth

Longest resolved dependency chain below this package.

Compatibility

Node.js
node >=10
Module format
CommonJS only
TypeScript
No bundled types
Install scripts
None

Quick start

A usage example from the semver README.

const semver = require('semver')

semver.valid('1.2.3') // '1.2.3'
semver.valid('a.b.c') // null
semver.clean('  =v1.2.3   ') // '1.2.3'
semver.satisfies('1.2.3', '1.x || >=2.5.0 || 5.0.0 - 7.2.3') // true
semver.gt('1.2.3', '9.8.7') // false
semver.lt('1.2.3', '9.8.7') // true
semver.minVersion('>=1.0.0') // '1.0.0'
semver.valid(semver.coerce('v2')) // '2.0.0'
semver.valid(semver.coerce('42.6.7.9.3-alpha')) // '42.6.7'

Dependencies

Declared by semver v7.8.5. Runtime dependencies are installed with the package; dev dependencies are not.

Dev (4)

@npmcli/eslint-config ^7.0.0@npmcli/template-oss 5.0.0benchmark ^2.1.4tap ^16.0.0

Used by

Popular packages that depend on semver.

node-releasesnpm

Node.js releases data

164.1M/wk1 dependentsMIT
eslintnpm

An AST-based pattern checker for JavaScript.

138.4M/wk279 dependentsMITTS
supports-preserve-symlinks-flagnpm

Determine if the current node version supports the `--preserve-symlinks` flag.

46.3M/wk1 dependentsMIT
ts-nodenpm

TypeScript execution environment and REPL for node.js, with source map support

42.2M/wk38 dependentsMITTS
cross-fetchnpm

Universal WHATWG Fetch API for Node, Browsers and React Native

32.9M/wk2 dependentsMITTS
kyselynpm

Type safe SQL query builder

15.6M/wk1 dependentsMIT
@expo/confignpm

A library for interacting with the app.json

9.1M/wk5 dependentsMITTS
fastifynpm

Fast and low overhead web framework, for Node.js

8.9M/wk4 dependentsMITTS
react-native-workletsnpm

The React Native multithreading library

5.2M/wk4 dependentsMITTS
node-notifiernpm

A Node.js module for sending notifications on native Mac, Windows (post and pre 8) and Linux (or Growl as fallback)

3.8M/wk4 dependentsMIT
mongodb-client-encryptionnpm

Official client encryption module for the MongoDB Node.js driver

211.1K/wk2 dependentsApache-2.0TS
mongodbnpm

The official MongoDB driver for Node.js

0/wk3 dependentsApache-2.0TS
v8-to-istanbulnpm

convert from v8 coverage format to istanbul's format

0/wk1 dependentsISCTS
gelnpm

The official Node.js client library for Gel

0/wk1 dependentsApache-2.0TS
jsdomnpm

A JavaScript implementation of many web standards

0/wk20 dependentsMIT
knexnpm

A batteries-included SQL query & schema builder for PostgresSQL, MySQL, CockroachDB, MSSQL and SQLite3

0/wk1 dependentsMITTS
nosticsnpm

Structured diagnostic code library

0/wk13 dependentsMITTS
pg-nativenpm

A slightly nicer interface to Postgres over node-libpq

0/wk2 dependentsMIT
@eslint-community/eslint-utilsnpm

Utilities for ESLint plugins.

0/wk1 dependentsMITTS
react-nativenpm

A framework for building native apps using React

0/wk30 dependentsMIT
@bramus/specificitynpm

Calculate specificity of a CSS Selector

0/wk1 dependentsMITTS
object-inspectnpm

string representations of objects in node and the browser

0/wk24 dependentsMIT
jest-confignpm

No description provided.

0/wk2 dependentsMITTS
lessnpm

Leaner CSS

0/wk2 dependentsApache-2.0

Relationship graph

Dependencies (left) and dependents (right) of semver.

Frequently installed together

Release history

11 releases in the last two years, typically about 14 days apart.

Recent versions of semver
VersionPublishedSizeLicense
7.8.5latest2 months ago99 KBISC
7.8.43 months ago98 KBISC
7.8.33 months ago98 KBISC
7.8.23 months ago98 KBISC
7.8.13 months ago98 KBISC
7.8.04 months ago98 KBISC
7.7.47 months ago96 KBISC
7.7.311 months ago95 KBISC
7.7.21 year ago95 KBISC
7.7.11 year ago94 KBISC
7.7.01 year ago94 KBISC
7.6.32 years ago94 KBISC
7.6.22 years ago93 KBISC
7.6.12 years ago93 KBISC
7.6.02 years ago92 KBISC

Overview

semver is an npm package that the semantic version parser used by npm. It has 55 known dependents in the graph. The latest version is 7.8.5, released under the ISC license.

Who should use it

Teams working in the npm ecosystem who need the semantic version parser used by npm and value a focused solution.

When not to use it

Consider an alternative if you need to have first-class TypeScript types out of the box, or if a more actively-maintained option better fits your npm stack.

Pros

  • Clear open-source license (ISC).
  • Trusted by 55 other packages.

Cons

  • No bundled TypeScript types (may require a separate @types package).

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

Frequently asked questions

Should I use semver?

Yes — semver scores well across adoption, maintenance, weight, supply chain, and licensing. No download data reported for this package yet. Last published 82 days ago. 11 releases in the last 2 years.

How do I install semver?

Run `npm install semver` to add semver to your npm project.

What license is semver released under?

semver is distributed under the ISC license.

How popular is semver?

npm does not publish download counts. Within PackageGraph's crawl, 55 known packages depend on semver.

Is semver still maintained?

The most recent release of semver (v7.8.5) was published 2 months ago.

Does semver run install scripts?

No. semver does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.