A library for sending JSON RPC requests to Solana RPCs
86%
Total Score
healthy
Healthy release: active repository maintenance and npm provenance outweigh limited workflow hygiene concerns.
Version 8.4.0 is a stable major release and not a prerelease, although the recent prerelease share of 90% indicates a fast-moving development stream.
The audit analyzed all 13 workflows, but found one untrusted checkout, high-confidence template-injection findings in package publishing, blanket app-token permissions, and seven workflows with top-level write access. These findings are material workflow hygiene concerns, though the risky patterns are not shown to combine into a single exploit path here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@solana/errors Version 8.4.0 | — | — |
@solana/rpc-api Version 8.4.0 | — | — |
@solana/rpc-spec Version 8.4.0 | — | — |
@solana/rpc-types Version 8.4.0 | — | — |
@solana/functional Version 8.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.