Helpers for representing, fetching and decoding Solana accounts
76%
Total Score
healthy
Healthy, with active maintenance and provenance offsetting notable GitHub Actions security-hygiene gaps.
Version 8.4.0 is a stable major release and not a prerelease, although 90% of recent releases being prereleases adds some version-churn risk.
All 13 workflows were analyzed, but the audit found high-confidence template-injection issues, one untrusted checkout in a pull_request_target workflow, blanket app-token permissions, and seven workflows with top-level write access. The trigger and sink paths do not establish a standalone severe risk, but these are meaningful release-workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@solana/errors Version 8.4.0 | — | — |
@solana/rpc-spec Version 8.4.0 | — | — |
@solana/addresses Version 8.4.0 | — | — |
@solana/rpc-types Version 8.4.0 | — | — |
@solana/codecs-core Version 8.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.