Typings for WalletConnect Protocol
72%
Total Score
caution
Active, well-backed package with strong maintenance signals but weak workflow pinning and limited package-specific repository transparency.
The repository name does not match the package and its README does not mention @walletconnect/types; although a monorepo mismatch is normal, the lack of a package-specific mention weakens verification of ownership.
No repository security policy was found, leaving vulnerability reporting and response expectations less transparent than they could be.
All 11 workflows were analyzed with no untrusted checkout or script-injection counts, but 28 of 29 action references are unpinned and high-confidence template-injection findings affect canary publishing workflows; the low-confidence cache finding is only hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
events Version 3.3.0 | — | — |
@walletconnect/events Version 1.0.1 | — | — |
@walletconnect/logger Version 3.0.2 | — | — |
@walletconnect/heartbeat Version 1.2.2 | — | — |
@walletconnect/jsonrpc-types Version 1.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.