Is @chainlink/contracts-ccip safe to use?

@chainlink/contracts-ccip has no known vulnerabilities on the latest version (1.6.4). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of @chainlink/contracts-ccip?

The latest version of @chainlink/contracts-ccip is 1.6.4, released 2025-12-03.

Does @chainlink/contracts-ccip have known vulnerabilities?

No known vulnerabilities on the latest version of @chainlink/contracts-ccip.

Is @chainlink/contracts-ccip deprecated?

No, @chainlink/contracts-ccip is actively maintained. Latest release: 1.6.4 (2025-12-03).

What are alternatives to @chainlink/contracts-ccip?

Popular alternatives to @chainlink/contracts-ccip in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @chainlink/contracts-ccip use?

@chainlink/contracts-ccip is licensed under BUSL-1.1.

@chainlink/contracts-ccip

npmv1.6.4

Chainlink smart contracts for CCIP

License BUSL-1.133 versions8 maintainers6 deps21,128 weekly dl

smartcontractkit/chainlink-ccip

/ 100

Health

use with caution

@chainlink/[email protected] low health (62/100) — consider alternatives

Moderate health score (62/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (6)

semver @changesets/cli @chainlink/contracts @changesets/get-github-info @openzeppelin/contracts-4.8.3 @openzeppelin/contracts-5.0.2

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@chainlink/contracts-ccip