Is @polkadot/extension-inject safe to use?

@polkadot/extension-inject has no known vulnerabilities on the latest version (0.63.1). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of @polkadot/extension-inject?

The latest version of @polkadot/extension-inject is 0.63.1, released 2026-03-31.

Does @polkadot/extension-inject have known vulnerabilities?

No known vulnerabilities on the latest version of @polkadot/extension-inject.

Is @polkadot/extension-inject deprecated?

No, @polkadot/extension-inject is actively maintained. Latest release: 0.63.1 (2026-03-31).

What are alternatives to @polkadot/extension-inject?

Popular alternatives to @polkadot/extension-inject in npm include: ?, debug, ansi-styles, brace-expansion, semver.

What license does @polkadot/extension-inject use?

@polkadot/extension-inject is licensed under Apache-2.0.

@polkadot/extension-inject

npmv0.63.1

A generic injector (usable to any extension), that populates the base exposed interfaces to be used by dapps.

License Apache-2.0permissive620 versions3 maintainers7 deps22,976 weekly dl

polkadot-js/extension

/ 100

Health

use with caution

@polkadot/[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

@polkadot/api @polkadot/rpc-provider @polkadot/types @polkadot/util @polkadot/util-crypto @polkadot/x-global tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@polkadot/extension-inject