Is @lit-protocol/contracts-sdk safe to use?

@lit-protocol/contracts-sdk has no known vulnerabilities on the latest version (7.4.0). DepScope rates its health at 29/100 (critical risk).

What is the latest version of @lit-protocol/contracts-sdk?

The latest version of @lit-protocol/contracts-sdk is 7.4.0, released 2025-12-30.

Does @lit-protocol/contracts-sdk have known vulnerabilities?

No known vulnerabilities on the latest version of @lit-protocol/contracts-sdk.

Is @lit-protocol/contracts-sdk deprecated?

Yes, @lit-protocol/contracts-sdk is deprecated: This package targets a retired Lit Protocol network and is no longer maintained. See https://developer.litprotocol.com for the current SDK. Consider using ? instead.

What are alternatives to @lit-protocol/contracts-sdk?

Popular alternatives to @lit-protocol/contracts-sdk in npm include: ?, semver, minimatch, ansi-styles, brace-expansion.

What license does @lit-protocol/contracts-sdk use?

@lit-protocol/contracts-sdk is licensed under MIT.

@lit-protocol/contracts-sdk

npmv7.4.0deprecated

ContractsSDK is a bundled package that allows you to make calls to Lit Protocol smart contracts. Some contracts come with additional abstracted functions that can be accessed by appending `Util` to the contract variable name, for example, `pkpNftContract`

License MITpermissive541 versions2 maintainers20 deps2,509 weekly dl

LIT-Protocol/js-sdk

/ 100

Health

find alternative

@lit-protocol/contracts-sdk is deprecated — find an alternative

Moderate health score (29/100) — verify manually
Package is deprecated

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@lit-protocol/contracts-sdk