Is @merit-systems/echo-react-sdk safe to use?

@merit-systems/echo-react-sdk has no known vulnerabilities on the latest version (1.0.39). DepScope rates its health at 54/100 (high risk).

What is the latest version of @merit-systems/echo-react-sdk?

The latest version of @merit-systems/echo-react-sdk is 1.0.39, released 2025-10-28.

Does @merit-systems/echo-react-sdk have known vulnerabilities?

No known vulnerabilities on the latest version of @merit-systems/echo-react-sdk.

Is @merit-systems/echo-react-sdk deprecated?

No, @merit-systems/echo-react-sdk is actively maintained. Latest release: 1.0.39 (2025-10-28).

What are alternatives to @merit-systems/echo-react-sdk?

Popular alternatives to @merit-systems/echo-react-sdk in npm include: ?, semver, ansi-styles, minimatch, debug.

What license does @merit-systems/echo-react-sdk use?

@merit-systems/echo-react-sdk is licensed under MIT.

@merit-systems/echo-react-sdk

npmv1.0.39

React SDK for Echo OAuth2 + PKCE authentication and token management

License MITpermissive243 versions3 maintainers7 deps

/ 100

Health

use with caution

@merit-systems/[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

590.4 KBminified

136.5 KB gzipped

7 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

ai swr dompurify @ai-sdk/react oidc-client-ts react-oidc-context @merit-systems/echo-typescript-sdk

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@merit-systems/echo-react-sdk