Is @zondax/ledger-live-icp safe to use?

@zondax/ledger-live-icp has no known vulnerabilities on the latest version (1.4.2). DepScope rates its health at 67/100 (moderate risk).

What is the latest version of @zondax/ledger-live-icp?

The latest version of @zondax/ledger-live-icp is 1.4.2, released 2026-03-31.

Does @zondax/ledger-live-icp have known vulnerabilities?

No known vulnerabilities on the latest version of @zondax/ledger-live-icp.

Is @zondax/ledger-live-icp deprecated?

No, @zondax/ledger-live-icp is actively maintained. Latest release: 1.4.2 (2026-03-31).

What are alternatives to @zondax/ledger-live-icp?

Popular alternatives to @zondax/ledger-live-icp in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @zondax/ledger-live-icp use?

@zondax/ledger-live-icp is licensed under Apache-2.0.

@zondax/ledger-live-icp

npmv1.4.2

ICP ledger live integration bridge library for Ledger Live

License Apache-2.0permissive13 versions2 maintainers12 deps17,088 weekly dl

Zondax/ledger-live-icp

/ 100

Health

use with caution

@zondax/[email protected] low health (67/100) — consider alternatives

Moderate health score (67/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (12)

@dfinity/agent @dfinity/candid @dfinity/identity-secp256k1 @dfinity/ledger-icp @dfinity/nns @dfinity/principal @dfinity/utils @noble/hashes bignumber.js cbor esbuild-plugin-import-pattern invariant

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@zondax/ledger-live-icp