
Security News
The Changelog Podcast: Practical Steps to Stay Safe on npm
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.


Sarah Gooding
July 18, 2025
Knip is a neat open source tool that scans JavaScript and TypeScript projects for unused files, exports, and dependencies, helping teams remove dead code and reduce maintenance overhead. It supports a wide ecosystem of frameworks and tools through more than 100 plugins, including Vite, ESLint, Bun, Tailwind, Next.js, and Storybook, and has been credited by companies like Vercel for helping remove over 300,000 lines of unused code.
This week, the project reached a major milestone: 500 releases. Maintainer Lars Kappert announced the milestone alongside v5.62.0, which brings improved TypeScript configuration support and updates for Vite, Biome, ESLint, and Angular plugins.
The latest update adds support for .ts extensions in the toLilconfig utility, improving Knip’s ability to automatically detect default TypeScript configurations. It also corrects the default reporter name for clearer output, along with other small improvements and bug fixes.

Knip’s 500-release milestone highlights its active development and growing adoption across the JavaScript ecosystem. The project has over 8,500 GitHub stars and has reached nearly 12 million of monthly downloads on npm.

Knip’s rapid rise in popularity reflects a broader industry shift toward proactive code hygiene and supply chain security. As high-profile supply chain attacks make headlines, developers are adopting tools that reduce risk by eliminating unused dependencies and dead code. Knip's ability to scale from small projects to large monorepos has made it a valuable addition for organizations seeking to streamline and secure their software.
Kappert marked the milestone on Bluesky, thanking contributors and supporters for their role in Knip’s ongoing evolution.
While v5.62.0 is a smaller update, it reflects Knip’s steady focus on incremental improvements and modern tooling support. Developers using Vite or ESLint, in particular, may benefit from the plugin updates and TypeScript enhancements included in this release.
Frequent releases, now at over 500, is a major driver of Knip's growth, demonstrating active maintenance and responsiveness to user feedback, which builds trust among developers. Combined with its straightforward setup and broad coverage of frameworks, Knip is increasingly becoming a standard part of the JavaScript and TypeScript developer toolkit.
Subscribe to our newsletter
Get notified when we publish new security blog posts!
Try it now

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.