Is @openzeppelin/hardhat-upgrades safe to use?

@openzeppelin/hardhat-upgrades has no known vulnerabilities on the latest version (3.9.1). DepScope rates its health at 83/100 (low risk).

What is the latest version of @openzeppelin/hardhat-upgrades?

The latest version of @openzeppelin/hardhat-upgrades is 3.9.1, released 2025-07-03.

Does @openzeppelin/hardhat-upgrades have known vulnerabilities?

No known vulnerabilities on the latest version of @openzeppelin/hardhat-upgrades.

Is @openzeppelin/hardhat-upgrades deprecated?

No, @openzeppelin/hardhat-upgrades is actively maintained. Latest release: 3.9.1 (2025-07-03).

What are alternatives to @openzeppelin/hardhat-upgrades?

Popular alternatives to @openzeppelin/hardhat-upgrades in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @openzeppelin/hardhat-upgrades use?

@openzeppelin/hardhat-upgrades is licensed under MIT.

@openzeppelin/hardhat-upgrades

npmv3.9.1

[![Docs](https://img.shields.io/badge/docs-%F0%9F%93%84-blue)](https://docs.openzeppelin.com/upgrades-plugins/hardhat-upgrades) [![NPM Package](https://img.shields.io/npm/v/@openzeppelin/hardhat-upgrades.svg)](https://www.npmjs.org/package/@openzeppelin/h

License MITpermissive84 versions7 maintainers9 deps71,707 weekly dl

OpenZeppelin/openzeppelin-upgrades

/ 100

Health

safe to use

@openzeppelin/[email protected] is safe to use (health: 83/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

8/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (9)

chalk debug undici ethereumjs-util proper-lockfile @openzeppelin/upgrades-core @openzeppelin/defender-sdk-base-client @openzeppelin/defender-sdk-deploy-client @openzeppelin/defender-sdk-network-client

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@openzeppelin/hardhat-upgrades

@openzeppelin/hardhat-upgrades

npmv3.9.1

License MITpermissive84 versions7 maintainers9 deps71,707 weekly dl

OpenZeppelin/openzeppelin-upgrades

/ 100

Health

safe to use

@openzeppelin/[email protected] is safe to use (health: 83/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

8/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (9)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@openzeppelin/hardhat-upgrades