Is @solana/pay safe to use?

@solana/pay has no known vulnerabilities on the latest version (0.2.6). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of @solana/pay?

The latest version of @solana/pay is 0.2.6, released 2025-07-25.

Does @solana/pay have known vulnerabilities?

No known vulnerabilities on the latest version of @solana/pay.

Is @solana/pay deprecated?

No, @solana/pay is actively maintained. Latest release: 0.2.6 (2025-07-25).

What are alternatives to @solana/pay?

Popular alternatives to @solana/pay in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @solana/pay use?

@solana/pay is licensed under Apache-2.0.

@solana/pay

npmv0.2.6

`@solana/pay` is a JavaScript library for facilitating commerce on Solana by using a token transfer URL scheme. The URL scheme ensures that no matter the wallet or service used, the payment request must be created and interpreted in one standard way.

License Apache-2.0permissive26 versions1 maintainers7 deps15,961 weekly dl

solana-labs/solana-pay

/ 100

Health

safe to use

@solana/[email protected] is safe to use (health: 64/100)

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

694.1 KBminified

186.9 KB gzipped

7 direct dependencies

ESMscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

js-base64 tweetnacl cross-fetch bignumber.js @solana/web3.js @solana/spl-token @solana/qr-code-styling

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@solana/pay