bolt.new B
npm dependency risk grade for stackblitz/bolt.new · score 89/100 · 72 of 72 packages scored · graded 2026-07-14 (refreshed on deploy)
This grade reflects bolt.new's npm dependencies (manifest/lockfile), not the project's own code quality or security.
- Grade cap applied: Direct dependency is deprecated: the repo grade cannot exceed B.
Lowest-scoring dependencies
| Package | Version | Score | |
|---|---|---|---|
| C | @lezer/highlight | 1.2.3 | 72 |
| B | @codemirror/lang-sass | 6.0.2 | 82 |
| B | @codemirror/lang-wast | 6.0.2 | 87 |
| B | remix-island | 0.2.0 | 87 |
| A | @codemirror/lang-json | 6.0.2 | 90 |
| A | @codemirror/lang-cpp | 6.0.3 | 90 |
| A | istextorbinary | 9.5.0 | 92 |
| A | @codemirror/lang-css | 6.3.1 | 93 |
| A | @codemirror/lang-python | 6.2.1 | 93 |
| A | @iconify-json/ph | 1.2.2 | 93 |
Maintainer of bolt.new? Re-run the grade now to update this page's underlying data for free. Grades refresh from live registry and OSV data on every run.
DepGrade scores are automated heuristics computed from public data (npm registry, GitHub, OSV.dev). They are provided "as is", without warranty of any kind, and are not security advice, an audit, or a guarantee that a package is safe or unsafe. A good grade doesn't mean a package is free of vulnerabilities; a poor grade doesn't mean it's compromised. Always do your own review before making dependency decisions. DepGrade accepts no liability for decisions made based on these scores.