Is @chainlink/contracts-ccip safe to use?

@chainlink/contracts-ccip has no known vulnerabilities on the latest version (2.0.0). DepScope rates its health at 67/100 (moderate risk).

What is the latest version of @chainlink/contracts-ccip?

The latest version of @chainlink/contracts-ccip is 2.0.0, released 2026-06-18.

Does @chainlink/contracts-ccip have known vulnerabilities?

No known vulnerabilities on the latest version of @chainlink/contracts-ccip.

Is @chainlink/contracts-ccip deprecated?

No, @chainlink/contracts-ccip is actively maintained. Latest release: 2.0.0 (2026-06-18).

What are alternatives to @chainlink/contracts-ccip?

Popular alternatives to @chainlink/contracts-ccip in npm include: ?, semver, debug, minimatch, ansi-styles.

What license does @chainlink/contracts-ccip use?

@chainlink/contracts-ccip is licensed under BUSL-1.1.

@chainlink/contracts-ccip

npmv2.0.0

Chainlink smart contracts for CCIP

License BUSL-1.135 versions8 maintainers4 deps22,345 weekly dl

smartcontractkit/chainlink-ccip

/ 100

Health

use with caution

@chainlink/[email protected] low health (67/100) — consider alternatives

Moderate health score (67/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (4)

@chainlink/ace @chainlink/contracts @openzeppelin/contracts-4.8.3 @openzeppelin/contracts-5.3.0

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@chainlink/contracts-ccip