Is @openzeppelin/upgrades safe to use?

@openzeppelin/upgrades has no known vulnerabilities on the latest version (2.8.0). DepScope rates its health at 13/100 (critical risk).

What is the latest version of @openzeppelin/upgrades?

The latest version of @openzeppelin/upgrades is 2.8.0, released 2020-03-25.

Does @openzeppelin/upgrades have known vulnerabilities?

No known vulnerabilities on the latest version of @openzeppelin/upgrades.

Is @openzeppelin/upgrades deprecated?

Yes, @openzeppelin/upgrades is deprecated: The OpenZeppelin SDK is no longer being developed. For smart contract upgrades check out the OpenZeppelin Upgrades Plugins. https://zpl.in/upgrades-plugins Consider using semver instead.

What are alternatives to @openzeppelin/upgrades?

Popular alternatives to @openzeppelin/upgrades in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @openzeppelin/upgrades use?

@openzeppelin/upgrades is licensed under MIT.

@openzeppelin/upgrades

npmv2.8.0deprecated

JavaScript library for the OpenZeppelin smart contract platform

License MITpermissive23 versions9 maintainers15 deps3,062 weekly dl

OpenZeppelin/openzeppelin-sdk

/ 100

Health

find alternative

@openzeppelin/upgrades is deprecated — find an alternative

Moderate health score (13/100) — verify manually
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

12/15

maturity

0/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

3145.6 KBminified

828.4 KB gzipped

15 direct dependencies

side effectsscoped

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (15)

cbor glob web3 axios chalk ethers lodash semver spinnies web3-eth web3-utils @types/cbor bignumber.js truffle-flattener web3-eth-contract

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@openzeppelin/upgrades