This release appears healthy and suitable to depend on: it is actively maintained, has a long and exceptionally frequent release history, is not deprecated, includes MIT licensing, TypeScript declarations, build provenance, and a clean package layout. The linked organization-owned repository is unarchived, recently updated, actively handles issues and pull requests, has 14 active contributors, security tooling, and a security policy. The main reservations are that one contributor accounts for about 70% of recent commits and several workflows use write permissions or pull_request_target, creating repository-maintenance and workflow-hygiene concerns, though these do not outweigh the strong maintenance and provenance evidence.
91%
Total Score
90
100
100
80
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@solana/errors Version 8.3.0 | — | — |
@solana/addresses Version 8.3.0 | — | — |
@solana/codecs-core Version 8.3.0 | — | — |
@solana/fixed-points Version 8.3.0 | — | — |
@solana/nominal-types Version 8.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.