npm · npm:dompurify

dompurify active

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It runs as JavaScript and works in all modern browsers, as well as in Node.js (via jsdom). DOMPurify is written by security people who have vast background in web a

The latest stable version of dompurify is 3.4.17, published on 2026-10-12. Verified by Vigia on 2026-11-12.

Maintenance

Heuristic based only on release dates; it does not measure issue or security response times.

Version history

Showing the 20 most recent of 153 versions. JSON

Version compatibility

Newest stable version that declares support for each runtime version (from the requirements published with each version).

Give your AI agent these facts

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

Frequently asked questions

Observed changes

• ue Oct 13 2026 10:51:10 GMT+0000 (Coordinated Universal Time) — released 3.4.17 → 3.4.17
• Mon Oct 12 2026 12:47:03 GM +0000 (Coordinated Universal Time) — released 3.4.16 → 3.4.17

Related packages

• @vitejs/plugin-react
• @babel/plugin-transform-template-literals
• regenerate-unicode-properties
• confbox
• lodash.once
• @webassemblyjs/wasm-opt
• @radix-ui/react-radio-group
• tmpl
• tinyspy
• minipass-collect
• vfile
• pkg-types

Badges for your README

Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:

[![version](https://vigia.coredls.cloud/badge/npm/dompurify/version.svg)](https://vigia.coredls.cloud/npm/dompurify)
[![maintained](https://vigia.coredls.cloud/badge/npm/dompurify/maintained.svg)](https://vigia.coredls.cloud/npm/dompurify)
[![status](https://vigia.coredls.cloud/badge/npm/dompurify/status.svg)](https://vigia.coredls.cloud/npm/dompurify)

For agents

GET https://vigia.coredls.cloud/v1/packages/npm/dompurify
GET https://vigia.coredls.cloud/v1/packages/npm/dompurify/versions/{version}