</>PackageGraphPackageGraph

valibot

npmv1.4.2TypeScript

The modular and type safe schema library for validating structural data

Safe to adopt

Yes — valibot scores well across adoption, maintenance, weight, supply chain, and licensing. 16.8M downloads per week and 5 known dependents. Last published 73 days ago. 31 releases in the last 2 years.

  • AAdoption: grade A, Excellent.

    16.8M downloads per week and 5 known dependents.

  • AMaintenance: grade A, Excellent.

    Last published 73 days ago. 31 releases in the last 2 years.

  • AWeight: grade A, Excellent.

    Zero runtime dependencies, about 1.8 MB installed.

  • BSupply chain: grade B, Good.

    This package has a single maintainer (bus factor of 1).

  • ALicense: grade A, Excellent.

    MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding valibot to a project.

0
Direct dependencies

Runtime packages this one declares itself.

0
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

1.8 MB
Install size

Unpacked size of this package plus its entire runtime tree.

—
Tree depth

Longest resolved dependency chain below this package.

Compatibility

Node.js
No constraint declared
Module format
ESM + CommonJS
TypeScript
Types included
Install scripts
None

Quick start

A usage example from the valibot README.

tsFull README ↗
import * as v from 'valibot'; // 1.31 kB

// Create login schema with email and password
const LoginSchema = v.object({
  email: v.pipe(v.string(), v.email()),
  password: v.pipe(v.string(), v.minLength(8)),
});

// Infer output TypeScript type of login schema as
// { email: string; password: string }
type LoginData = v.InferOutput<typeof LoginSchema>;

// Throws error for email and password
const output1 = v.parse(LoginSchema, { email: '', password: '' });
Example truncated — see the full README.

valibot vs the alternatives

Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.

PackageWeekly downloadsDependentsLicenseLast release
valibotthis page16.8M5MIT2 months ago
zod246.7M13MIT1 day ago
@standard-schema/spec99.1M9MIT1 day ago
tsx61.9M26MIT1 day ago
ts-node42.2M38MIT1 day ago
kysely15.6M1MIT1 day ago

Dependencies

Declared by valibot v1.4.2. Runtime dependencies are installed with the package; dev dependencies are not.

Peer (1)

typescript >=5

Dev (15)

@eslint/js ^9.39.1@vitest/coverage-v8 ^4.1.8eslint ^9.39.1eslint-plugin-import ^2.32.0eslint-plugin-jsdoc ^61.4.0eslint-plugin-redos-detector ^3.1.1eslint-plugin-regexp ^2.10.0eslint-plugin-security ^3.0.1jsdom ^27.2.0tsdown ^0.16.6tsm ^2.3.0typescript ^5.9.3typescript-eslint ^8.47.0vite ^7.2.4vitest 4.1.8

Used by

Popular packages that depend on valibot.

rolldownnpm

Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.

↓ 81.9M/wk◈ 8 dependents⚖ MITTS
@reduxjs/toolkitnpm

The official, opinionated, batteries-included toolset for efficient Redux development

↓ 26.4M/wk◈ 2 dependents⚖ MITTS
@devframes/hubnpm

Hub layer that orchestrates devframe docks, terminals, messages, and commands on any host.

↓ 0/wk◈ 7 dependents⚖ MITTS
devframenpm

Framework for building one portable devtool integration that runs in any viewer.

↓ 0/wk◈ 14 dependents⚖ MITTS
@devframes/plugin-terminalsnpm

Devframe plugin providing terminal panels for streamed output and interactive PTY shells.

↓ 0/wk◈ 1 dependents⚖ MITTS

Relationship graph

Dependencies (left) and dependents (right) of valibot.

rolldown@reduxjs/toolkit@devframes/hubdevframe@devframes/plugin…valibot
valibot dependencies dependents

Frequently installed together

cacnpm

Simple yet powerful framework for building command-line apps.

↓ 44M/wk◈ 9 dependents⚖ MIT
pathenpm

Universal filesystem path utils

↓ 0/wk◈ 25 dependents⚖ MITTS
devframenpm

Framework for building one portable devtool integration that runs in any viewer.

↓ 0/wk◈ 14 dependents⚖ MITTS
h3npm

Minimal H(TTP) framework built for high performance and portability.

↓ 34.2M/wk◈ 8 dependents⚖ MITTS
get-port-pleasenpm

Get an available TCP port to listen

↓ 0/wk◈ 10 dependents⚖ MITTS
mllynpm

Missing ECMAScript module utils for Node.js

↓ 25.1M/wk◈ 7 dependents⚖ MITTS
perfect-debouncenpm

<!-- automd:badges color=yellow codecov bundlephobia packagephobia -->

↓ 0/wk◈ 3 dependents⚖ MITTS
ufonpm

URL utils for humans

↓ 43.6M/wk◈ 5 dependents⚖ MITTS
@standard-schema/specnpm

A family of specs for interoperable TypeScript

↓ 99.1M/wk◈ 9 dependents⚖ MITTS
nosticsnpm

Structured diagnostic code library

↓ 0/wk◈ 13 dependents⚖ MITTS
@modelcontextprotocol/clientnpm

Model Context Protocol implementation for TypeScript - Client package

↓ 0/wk◈ 2 dependents⚖ MITTS
@modelcontextprotocol/servernpm

Model Context Protocol implementation for TypeScript - Server package

↓ 0/wk◈ 1 dependents⚖ MITTS

Release history

19 releases in the last two years, typically about 9 days apart.

Recent versions of valibot
VersionPublishedSizeLicense
1.4.2latest2 months ago1.8 MBMIT
1.4.13 months ago1.8 MBMIT
1.4.04 months ago1.8 MBMIT
1.3.15 months ago1.7 MBMIT
1.3.05 months ago1.7 MBMIT
1.2.09 months ago1.7 MBMIT
1.1.01 year ago1.7 MBMIT
1.0.01 year ago1.6 MBMIT
1.0.0-rc.41 year ago1.6 MBMIT
1.0.0-rc.31 year ago1.6 MBMIT
1.0.0-rc.21 year ago1.6 MBMIT
1.0.0-rc.11 year ago1.6 MBMIT
1.0.0-rc.01 year ago1.6 MBMIT
1.0.0-beta.151 year ago1.6 MBMIT
1.0.0-beta.141 year ago1.6 MBMIT

Overview

valibot is an npm package that the modular and type safe schema library for validating structural data. It is extremely widely used, with about 16.8M downloads per week and 5 known dependents in the graph. The latest version is 1.4.2, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need the modular and type safe schema library for validating structural data and value a battle-tested, widely-adopted solution.

When not to use it

Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your npm stack.

Pros

  • Large, well-established user base (16.8M weekly downloads).
  • Ships TypeScript type definitions.
  • Clear open-source license (MIT).

Cons

  • Large dependency tree (16 direct dependencies) increases install size and audit surface.

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

fabian-hiller

Keywords

bundle-sizemodularparsingruntimeschematype-safetypescriptvalidation

Frequently asked questions

Should I use valibot?

Yes — valibot scores well across adoption, maintenance, weight, supply chain, and licensing. 16.8M downloads per week and 5 known dependents. Last published 73 days ago. 31 releases in the last 2 years.

How do I install valibot?

Run `npm install valibot` to add valibot to your npm project.

What license is valibot released under?

valibot is distributed under the MIT license.

How popular is valibot?

valibot has approximately 16,750,502 downloads per week and 5 known dependent packages.

Is valibot still maintained?

The most recent release of valibot (v1.4.2) was published 2 months ago.

Does valibot run install scripts?

No. valibot does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.