Is @sitecore-marketplace-sdk/client safe to use?

@sitecore-marketplace-sdk/client has no known vulnerabilities on the latest version (0.3.2). DepScope rates its health at 56/100 (high risk).

What is the latest version of @sitecore-marketplace-sdk/client?

The latest version of @sitecore-marketplace-sdk/client is 0.3.2, released 2026-02-11.

Does @sitecore-marketplace-sdk/client have known vulnerabilities?

No known vulnerabilities on the latest version of @sitecore-marketplace-sdk/client.

Is @sitecore-marketplace-sdk/client deprecated?

No, @sitecore-marketplace-sdk/client is actively maintained. Latest release: 0.3.2 (2026-02-11).

What are alternatives to @sitecore-marketplace-sdk/client?

Popular alternatives to @sitecore-marketplace-sdk/client in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @sitecore-marketplace-sdk/client use?

@sitecore-marketplace-sdk/client is licensed under Apache-2.0.

@sitecore-marketplace-sdk/client

npmv0.3.2

The `client` package provides secure, bidirectional communication between a Marketplace application (the client) and Sitecore (the host). Sitecore loads the Marketplace app inside a sandboxed [iframe](https://developer.mozilla.org/en-US/docs/Web/HTML/Elem

License Apache-2.0permissive9 versions3 maintainers3 deps4,190 weekly dl

Sitecore/sitecore-marketplace-sdk

/ 100

Health

use with caution

@sitecore-marketplace-sdk/[email protected] low health (56/100) — consider alternatives

Moderate health score (56/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

6/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@sitecore-marketplace-sdk/core tslib uuid

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@sitecore-marketplace-sdk/client