Is @replit/connect safe to use?

@replit/connect has no known vulnerabilities on the latest version (1.6.0). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of @replit/connect?

The latest version of @replit/connect is 1.6.0, released 2026-06-24.

Does @replit/connect have known vulnerabilities?

No known vulnerabilities on the latest version of @replit/connect.

Is @replit/connect deprecated?

No, @replit/connect is actively maintained. Latest release: 1.6.0 (2026-06-24).

What are alternatives to @replit/connect?

Popular alternatives to @replit/connect in npm include: ?, debug, ansi-styles, semver, brace-expansion.

What license does @replit/connect use?

License information for @replit/connect is not declared in the registry metadata.

@replit/connect

npmv1.6.0

Frontend SDK for embedding OpenInt's connection flow in host apps via popup, iframe (inline or dialog), or direct rendering — usable from Vanilla JS and React. Not the server-side connector framework or the consumer-side identity/proxy SDK; see `kits/cdk`

10 versions11 maintainers1 deps29,494 weekly dl

/ 100

Health

use with caution

@replit/[email protected] low health (66/100) — consider alternatives

Moderate health score (66/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

6/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

@replit/connectors

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@replit/connect