viem
TypeScript Interface for Ethereum
94%
Total Score
healthy
Active releases, 206 recent commits, organization backing, and npm provenance outweigh limited workflow hygiene concerns.
Health Score Breakdown
All seven workflows were analyzed successfully with no untrusted checkouts or script injection and job-level or read-only permissions. However, two high-confidence medium findings involve secrets-inherit, and 26 of 32 action references are unpinned, creating a limited workflow-hygiene concern.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-540380 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. viem is vulnerable to Denial of Service (DoS) in versions 0.1.0 - 2.53.1. | 0.1.0 - 2.53.1 | Medium |
AIKIDO-2024-10466 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. viem is vulnerable to Insufficient Entropy in versions 0.2.0 - 2.21.48. | 0.2.0 - 2.21.48 | Medium |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ox Version 0.14.56 | — | — |
ws Version 8.21.0 | — | — |
isows Version 1.0.7 | — | — |
abitype Version 1.2.3 | — | — |
@scure/bip32 Version 1.7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 4 years ago
- Unpacked Size
- 27.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.