npm · npm:picomatch
picomatch active
Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.
The latest stable version of picomatch is 4.0.7, published on 2026-08-24. Verified by Vigia on 2026-11-12.
| Latest stable version | 4.0.7 |
|---|---|
| Published | 2026-08-24 14:36:23 UTC |
| Install | npm install picomatch@latest |
| Requires (engines) | {"node":">=12"} |
| Peer dependencies | — |
| Dist-tags | latest: 4.0.7 |
| License | MIT |
| Advisories on latest version | none known |
| Last verified | 2026-11-12 13:36:21 UTC |
| Sources | api.deps.dev, registry.npmjs.org, registry.npmjs.org |
Maintenance
| Activity | active |
|---|---|
| Last stable release | 2026-08-24 14:36:23 UTC · 80 days ago |
| Stable releases in the last 12 months | 6 |
| Published versions | 35 |
Heuristic based only on release dates; it does not measure issue or security response times.
Version history
| Version | Published |
|---|---|
4.0.7 | 2026-08-24 14:36:23 UTC |
4.0.6 | 2026-08-24 14:29:55 UTC |
4.0.5 | 2026-07-02 16:47:23 UTC |
4.0.4 | 2026-03-23 20:39:47 UTC |
3.0.2 | 2026-03-23 20:39:33 UTC |
2.3.2 | 2026-03-23 20:39:08 UTC |
4.0.3 | 2025-07-15 19:39:26 UTC |
4.0.2 | 2024-03-28 03:23:11 UTC |
4.0.1 | 2024-02-08 02:31:53 UTC |
4.0.0 | 2024-02-08 02:22:12 UTC |
3.0.1 | 2023-10-29 08:12:50 UTC |
3.0.0 | 2023-10-29 00:58:21 UTC |
2.3.1 | 2022-01-02 17:18:24 UTC |
2.3.0 | 2021-05-22 01:49:20 UTC |
2.2.3 | 2021-04-10 10:14:40 UTC |
2.2.2 | 2020-03-21 11:32:14 UTC |
2.2.1 | 2020-01-04 21:19:48 UTC |
2.2.0 | 2020-01-04 20:31:40 UTC |
2.1.1 | 2019-11-06 22:23:26 UTC |
2.1.0 | 2019-10-31 08:03:28 UTC |
Showing the 20 most recent of 35 versions. JSON
Version compatibility
Newest stable version that declares support for each runtime version (from the requirements published with each version).
| Runtime | Newest compatible version |
|---|---|
node 16 | 4.0.7 |
node 18 | 4.0.7 |
node 20 | 4.0.7 |
node 22 | 4.0.7 |
node 24 | 4.0.7 |
Upgrade guides for this package
Give your AI agent these facts
Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.
claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp
Add to CursorAdd to VS Code★ Star on GitHub
Any other MCP client
{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests
Frequently asked questions
What is the latest version of picomatch?
The latest stable version of picomatch is 4.0.7, published on 2026-08-24. Verified by Vigia on 2026-11-12.
How do I install the latest version of picomatch?
Run npm install picomatch@latest. The latest stable version is 4.0.7 (verified 2026-11-12).
Is picomatch deprecated?
No. picomatch is not marked as deprecated in the registry.
Which Node.js version does picomatch require?
picomatch 4.0.7 declares this requirement: {"node":">=12"}.
Does picomatch 4.0.7 have known vulnerabilities?
No known advisories affect picomatch 4.0.7 according to the data Vigia checks.
Is picomatch still maintained?
picomatch published 6 stable releases in the last 12 months; the most recent was 80 days ago. Activity: active.
Observed changes
No changes observed yet since Vigia started tracking this package.
Related packages
- tslib
- emoji-regex
- wrap-ansi
- glob
- type-fest
- string-width
- color-name
- lru-cache
- commander
- eslint-visitor-keys
- chalk
- color-convert
Badges for your README
Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:
[](https://vigia.coredls.cloud/npm/picomatch) [](https://vigia.coredls.cloud/npm/picomatch) [](https://vigia.coredls.cloud/npm/picomatch)
For agents
GET https://vigia.coredls.cloud/v1/packages/npm/picomatch
GET https://vigia.coredls.cloud/v1/packages/npm/picomatch/versions/{version}