npm · npm:xss

xss active

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

The latest stable version of xss is 1.0.17, published on 2026-10-24. Verified by Vigia on 2026-11-12.

Latest stable version	1.0.17
Published	2026-10-24 14:22:09 UTC
Install	`npm install xss@latest`
Requires (engines)	`{"node":">= 0.10.0"}`
Peer dependencies	—
Dist-tags	`latest: 1.0.17`
License	MIT
Advisories on latest version	none known
Last verified	2026-11-12 11:51:41 UTC
Sources	api.deps.dev, registry.npmjs.org, registry.npmjs.org

Ask your AI assistant to check this

AI models are trained up to a date, so they can be wrong about versions, deprecations and vulnerabilities. Paste this into Claude, ChatGPT, Perplexity or Cursor and it will answer with the verified data on this page:

Before answering about the npm package "xss", check Vigia (verified, dated facts): https://vigia.coredls.cloud/v1/packages/npm/xss . For my whole project use https://vigia.coredls.cloud/context

Check my whole package.json

Using an AI coding agent every day? Connect Vigia once and it checks this by itself.

Maintenance

Activity	active
Last stable release	2026-10-20 08:27:17 UTC · 23 days ago
Stable releases in the last 12 months	1
Published versions	72

Heuristic based only on release dates; it does not measure issue or security response times.

Version history

Version	Published
`1.0.16`	2026-10-20 08:27:17 UTC
`1.0.15`	2024-03-03 02:33:54 UTC
`1.0.14`	2022-08-16 13:54:26 UTC
`1.0.13`	2022-06-06 16:05:17 UTC
`1.0.12`	2022-06-03 16:12:42 UTC
`1.0.11`	2022-03-06 07:21:16 UTC
`1.0.10`	2021-10-08 09:00:32 UTC
`1.0.9`	2021-05-06 15:59:29 UTC
`1.0.8`	2020-07-27 02:20:45 UTC
`1.0.7`	2020-06-08 02:58:03 UTC
`1.0.6`	2019-03-21 03:00:29 UTC
`1.0.5`	2019-03-20 06:08:53 UTC
`1.0.4`	2019-03-20 05:45:02 UTC
`1.0.3`	2018-05-25 06:40:41 UTC
`1.0.2`	2018-05-25 06:39:44 UTC
`1.0.1`	2018-05-24 07:55:55 UTC
`1.0.0`	2018-05-24 07:11:15 UTC
`0.3.8`	2018-04-13 14:20:44 UTC
`0.3.7`	2017-12-29 01:53:45 UTC
`0.3.6`	2017-12-21 07:07:19 UTC

Showing the 20 most recent of 72 versions. JSON

Version compatibility

Newest stable version that declares support for each runtime version (from the requirements published with each version).

Runtime	Newest compatible version
`node 16`	`1.0.16`
`node 18`	`1.0.16`
`node 20`	`1.0.16`
`node 22`	`1.0.16`
`node 24`	`1.0.16`

Give your AI agent these facts

Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

Add to Cursor Add to VS Code ★ Star on GitHub

Any other MCP client

{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests

Frequently asked questions

What is the latest version of xss?

The latest stable version of xss is 1.0.17, published on 2026-10-24. Verified by Vigia on 2026-11-12.

How do I install the latest version of xss?

Run npm install xss@latest. The latest stable version is 1.0.17 (verified 2026-11-12).

Is xss deprecated?

No. xss is not marked as deprecated in the registry.

Which Node.js version does xss require?

xss 1.0.17 declares this requirement: {"node":">= 0.10.0"}.

Does xss 1.0.17 have known vulnerabilities?

No known advisories affect xss 1.0.17 according to the data Vigia checks.

Is xss still maintained?

xss published 1 stable releases in the last 12 months; the most recent was 23 days ago. Activity: active.

Observed changes

Sun Oct 25 2026 10:30:09 GM +0000 (Coordinated Universal Time) — released 1.0.17 → 1.0.17
Sat Oct 24 2026 14:29:00 GM +0000 (Coordinated Universal Time) — released 1.0.16 → 1.0.17
ue Oct 20 2026 09:02:37 GMT+0000 (Coordinated Universal Time) — released 1.0.15 → 1.0.16

Related packages

Badges for your README

Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:

[![version](https://vigia.coredls.cloud/badge/npm/xss/version.svg)](https://vigia.coredls.cloud/npm/xss)
[![maintained](https://vigia.coredls.cloud/badge/npm/xss/maintained.svg)](https://vigia.coredls.cloud/npm/xss)
[![status](https://vigia.coredls.cloud/badge/npm/xss/status.svg)](https://vigia.coredls.cloud/npm/xss)

For agents

GET https://vigia.coredls.cloud/v1/packages/npm/xss
GET https://vigia.coredls.cloud/v1/packages/npm/xss/versions/{version}