npm package
Home@hapi/bourne
@hapi/bourne is a drop-in replacement for JSON. parse() that provides protection against prototype poisoning. It is particularly useful in applications where secure JSON parsing is critical, and it integrates well with the hapi web framework.
- lurq health score
- 68/100
- Confidence
- proven
- Weekly downloads
- 3,709,042
- Latest version
- 4.0.1
- Last release
- Jul 2, 2026
- License
- BSD-3-Clause
Should you depend on @hapi/bourne?
lurq's verdict: low
- No known advisories
Check this from your coding agent
This page is a daily snapshot. lurq's verify tool checks @hapi/bourne at the exact version your agent is about to install, and compat checks it against the rest of your stack. One command connects Claude Code, Cursor, VS Code and other agents:
npx lurqrun
Free to start. Quickstart
Upgrading @hapi/bourne
What each major version removed, renamed or re-signatured, from lurq's extraction of the published packages.
- 3.0.0 → 4.0.1diff ready
- 2.1.0 → 3.0.0being extracted
- 1.3.2 → 2.1.0being extracted
Other framework packages lurq scores
- @mui/types94/100 · proven
- @mui/styled-engine94/100 · proven
- fastify94/100 · proven
- @nestjs/common93/100 · proven
- @angular/platform-browser93/100 · proven
Scored from public signals (npm registry, GitHub, deps.dev and advisory databases). Data as of Sep 16, 2026; this page refreshes every 168 hours. Source repository.