Web3 module encode and decode EVM in/output.
18%
Total Score
50
71
75
The package has 517 releases and a long history, but it had no releases in the last 12 months and its latest release was over a year ago, indicating the project is no longer actively shipping.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the lack of current maintenance.
The linked repository is archived, which is a severe abandonment risk for a package that may need fixes or updates.
There were no new or closed issues or pull requests in the last month, and no pull requests were open, which is consistent with an inactive project.
All six workflows were analyzed with no untrusted checkout or script-injection findings, but all 52 action references are unpinned and the audit found high-severity, low-confidence cache-poisoning patterns plus high-confidence ad hoc package installs.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
abitype Version 0.7.1 | — | — |
web3-types Version ^1.10.0 | — | — |
web3-utils Version ^4.3.3 | — | — |
web3-errors Version ^1.3.1 | — | — |
web3-validator Version ^2.0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.