@lifi/perps-sdk-provider-lighter
This release appears suitable to depend on: it is actively released, not deprecated, backed by a currently active organization-owned repository, has npm provenance, strong TypeScript declarations, a clear license, reproducible repository scaffolding, and no install-time lifecycle scripts or dangerous workflow patterns. The main reservations are the package's short 84-day history, high recent prerelease share, and concentrated commit activity where one contributor made about 86% of recent commits; however, six active contributors and organization backing reduce the bus-factor concern. The missing security policy and incomplete top-level workflow permission declarations are transparency and hardening gaps, but not evidence of abandonment.
86%
Total Score
90
100
94
80
100
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-749277 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @lifi/perps-sdk-provider-lighter is vulnerable to Incorrect Authorization in versions 1.0.0 - 12.1.1. | 1.0.0 - 12.1.1 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 viem Version ^2.55.18 | — | — |
big.js Version ^7.0.1 | — | — |
@lifi/perps-types Version ^12.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 3 months ago
- Unpacked Size
- 13.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.