Is @lit-protocol/contracts-sdk safe to use?

@lit-protocol/contracts-sdk has no known vulnerabilities on the latest version (7.4.0). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of @lit-protocol/contracts-sdk?

The latest version of @lit-protocol/contracts-sdk is 7.4.0, released 2025-12-30.

Does @lit-protocol/contracts-sdk have known vulnerabilities?

No known vulnerabilities on the latest version of @lit-protocol/contracts-sdk.

Is @lit-protocol/contracts-sdk deprecated?

No, @lit-protocol/contracts-sdk is actively maintained. Latest release: 7.4.0 (2025-12-30).

What are alternatives to @lit-protocol/contracts-sdk?

Popular alternatives to @lit-protocol/contracts-sdk in npm include: ?, semver, ansi-styles, minimatch, debug.

What license does @lit-protocol/contracts-sdk use?

@lit-protocol/contracts-sdk is licensed under MIT.

@lit-protocol/contracts-sdk

npmv7.4.0

ContractsSDK is a bundled package that allows you to make calls to Lit Protocol smart contracts. Some contracts come with additional abstracted functions that can be accessed by appending `Util` to the contract variable name, for example, `pkpNftContract`

License MITpermissive541 versions2 maintainers20 deps5,296 weekly dl

LIT-Protocol/js-sdk

/ 100

Health

use with caution

@lit-protocol/[email protected] low health (64/100) — consider alternatives

Moderate health score (64/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1368.4 KBminified

286.7 KB gzipped

20 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@lit-protocol/contracts-sdk