Ethereum Providers for ethers.
72%
Total Score
88
50
89
83
The package has 20 runtime dependencies, creating meaningful transitive maintenance exposure, but the dependencies are specific ethers components and common supporting libraries.
The package is mature with 115 releases, but it has had no registry releases in the last 12 months despite a median historical interval of about 8 days, indicating a legacy maintenance pattern.
Recent activity includes one new and one closed issue plus nine new pull requests, although none of those pull requests were merged in the measured month.
The project uses Rollup, TypeScript, and npm scripts, providing a structured build; no repository security-scanning tools were detected.
All four workflows were analyzed with no untrusted checkouts, injection findings, or write-wide permissions. However, all 21 action references are unpinned and a high-confidence low-severity audit found an ad hoc package installation, leaving workflow reproducibility and hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ws Version 8.18.0 | — | — |
bech32 Version 1.1.4 | — | — |
@ethersproject/rlp Version ^5.8.0 | — | — |
@ethersproject/web Version ^5.8.0 | — | — |
@ethersproject/hash Version ^5.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.