@solana/promises

Helpers for using JavaScript promises

Latest 8.4.0

68%

Total Score

caution

Usable with caveats: active organization-backed maintenance is offset by high-confidence workflow findings and an unclear package-to-repository match.

Health Score Breakdown

Workflow audit

The audit was complete, but it found a pull_request_target workflow with an untrusted checkout, high-confidence template-injection findings in publishing, and broad app-token permissions; these create meaningful workflow hygiene and supply-chain exposure.

Repo package mention

The repository name does not match the package and its README does not mention @solana/promises, leaving the package-to-source relationship insufficiently explicit despite the monorepo context.

Version stability

Version 8.4.0 is a stable major release and not a prerelease, although 90% of recent releases being prereleases indicates a somewhat experimental release stream.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

solana-devs

Direct Dependencies

No direct dependencies.

68%

Total Score

caution

Usable with caveats: active organization-backed maintenance is offset by high-confidence workflow findings and an unclear package-to-repository match.