Is @cross-connect/sign-client safe to use?

@cross-connect/sign-client has no known vulnerabilities on the latest version (2.19.8). DepScope rates its health at 38/100 (critical risk).

What is the latest version of @cross-connect/sign-client?

The latest version of @cross-connect/sign-client is 2.19.8, released 2025-03-21.

Does @cross-connect/sign-client have known vulnerabilities?

No known vulnerabilities on the latest version of @cross-connect/sign-client.

Is @cross-connect/sign-client deprecated?

No, @cross-connect/sign-client is actively maintained. Latest release: 2.19.8 (2025-03-21).

What are alternatives to @cross-connect/sign-client?

Popular alternatives to @cross-connect/sign-client in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @cross-connect/sign-client use?

@cross-connect/sign-client is licensed under Apache-2.0.

@cross-connect/sign-client

npmv2.19.8

Sign Client for Cross Connect Protocol

License Apache-2.0permissive9 versions1 maintainers9 deps14 weekly dl

/ 100

Health

use with caution

@cross-connect/[email protected] low health (38/100) — consider alternatives

Moderate health score (38/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (9)

@cross-connect/core @walletconnect/events @walletconnect/heartbeat @walletconnect/jsonrpc-utils @walletconnect/logger @walletconnect/time @walletconnect/types @walletconnect/utils events

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@cross-connect/sign-client