tsup

9.0.0 · 14 Oct 2026MIT8.5M / weekRepository Homepage npm Atom feed

Your version

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Line	Newest	Where it stands
	9.0.0	No known advisory
	8.5.1	Safe from 8.3.5
	7.3.0	7 open advisories, worst low · last release Nov 2023, no longer updated

Low
tsup DOM Clobbering vulnerabilityGHSA-3mv9-4h5g-vhg3 · 3 Mar 2025
fixed in 8.3.5

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 28 Oct 2026. Releases and advisories last read 28 Oct 2026.