Is spl-token-swap safe to use?

spl-token-swap has 2 known vulnerabilities on the latest version (3.0.0). DepScope rates its health at 41/100 (high risk).

What is the latest version of spl-token-swap?

The latest version of spl-token-swap is 3.0.0, released 2022-06-08.

Does spl-token-swap have known vulnerabilities?

Yes. spl-token-swap has 2 known vulnerabilities. See depscope.dev/pkg/cargo/spl-token-swap for details.

Is spl-token-swap deprecated?

No, spl-token-swap is actively maintained. Latest release: 3.0.0 (2022-06-08).

What are alternatives to spl-token-swap?

Popular alternatives to spl-token-swap in Cargo include: hashbrown, getrandom, windows-sys, syn.

What license does spl-token-swap use?

spl-token-swap is licensed under Apache-2.0.

spl-token-swap

cargov3.0.0

Solana Program Library Token Swap

License Apache-2.0permissive3 versions0 deps5,328 weekly dl

solana-labs/solana-program-library

/ 100

Health

safe to use

[email protected] is safe to use (health: 41/100)

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

23/25

security

12/15

maturity

0/15

community

Vulnerabilities

1 medium1 low

Advisories (2)

Severity	ID	Summary	Fixed in
medium	RUSTSEC-2024-0426	Unsound usages of `u8` type casting in spl-token-swap	—
unknown	GHSA-h6xm-c6r4-vmwf	Unsound usages of `u8` type casting	—

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/spl-token-swap