Is @cross-connect/universal-provider safe to use?

@cross-connect/universal-provider has no known vulnerabilities on the latest version (2.19.3). DepScope rates its health at 38/100 (critical risk).

What is the latest version of @cross-connect/universal-provider?

The latest version of @cross-connect/universal-provider is 2.19.3, released 2025-03-21.

Does @cross-connect/universal-provider have known vulnerabilities?

No known vulnerabilities on the latest version of @cross-connect/universal-provider.

Is @cross-connect/universal-provider deprecated?

No, @cross-connect/universal-provider is actively maintained. Latest release: 2.19.3 (2025-03-21).

What are alternatives to @cross-connect/universal-provider?

Popular alternatives to @cross-connect/universal-provider in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does @cross-connect/universal-provider use?

@cross-connect/universal-provider is licensed under Apache-2.0.

@cross-connect/universal-provider

npmv2.19.3

Universal Provider for Cross Connect Protocol

License Apache-2.0permissive4 versions1 maintainers12 deps

to-nexus/cross-connect

/ 100

Health

use with caution

@cross-connect/[email protected] low health (38/100) — consider alternatives

Moderate health score (38/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (12)

@walletconnect/events @walletconnect/jsonrpc-http-connection @walletconnect/jsonrpc-provider @walletconnect/jsonrpc-types @walletconnect/jsonrpc-utils @walletconnect/keyvaluestorage @walletconnect/logger @cross-connect/sign-client @walletconnect/types @walletconnect/utils events lodash

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@cross-connect/universal-provider