Is @metaplex-foundation/mpl-token-metadata safe to use?

@metaplex-foundation/mpl-token-metadata has no known vulnerabilities on the latest version (3.4.0). DepScope rates its health at 50/100 (high risk).

What is the latest version of @metaplex-foundation/mpl-token-metadata?

The latest version of @metaplex-foundation/mpl-token-metadata is 3.4.0, released 2025-02-02.

No known vulnerabilities on the latest version of @metaplex-foundation/mpl-token-metadata.

No, @metaplex-foundation/mpl-token-metadata is actively maintained. Latest release: 3.4.0 (2025-02-02).

Popular alternatives to @metaplex-foundation/mpl-token-metadata in npm include: minimatch, wrap-ansi, @types/node, eslint-visitor-keys, ajv.

@metaplex-foundation/mpl-token-metadata is licensed under Apache-2.0.

npmv3.4.0

JavaScript client for Token Metadata

License Apache-2.0permissive83 versions6 maintainers1 deps

/ 100

Health

safe to use

@metaplex-foundation/[email protected] is safe to use (health: 50/100)

Health breakdown0 – 100

5/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

🌟

10/10typed

bundled

Dependencies (1)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@metaplex-foundation/mpl-token-metadata