@solana/accounts

The release is backed by frequent publishing, active contributors, tests in the repository, and reproducible npm provenance. GitHub Actions still has high-confidence template-injection findings, an untrusted checkout in a pull-request workflow, and broad app permissions. The organization-backed project remains active and non-archived.

Latest 8.4.0

NPM

76%

Total Score

Maintainer Stability

100

Maturity

Supply Chain

Attestations

100

Health Score Breakdown

Version stability

Version 8.4.0 is a stable major release and not a prerelease, although 90% of recent releases being prereleases adds some version-churn risk.

Workflow audit

All 13 workflows were analyzed, but the audit found high-confidence template-injection issues, one untrusted checkout in a pull_request_target workflow, blanket app-token permissions, and seven workflows with top-level write access. The trigger and sink paths do not establish a standalone severe risk, but these are meaningful release-workflow hygiene concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

solana-devs

Direct Dependencies

Dependency	Last Release	Score
@solana/errors Version 8.4.0	—	—
@solana/rpc-spec Version 8.4.0	—	—
@solana/addresses Version 8.4.0	—	—
@solana/rpc-types Version 8.4.0	—	—
@solana/codecs-core Version 8.4.0	—	—