Is @sd-jwt/decode safe to use?

@sd-jwt/decode has no known vulnerabilities on the latest version (0.19.0). DepScope rates its health at 32/100 (critical risk).

What is the latest version of @sd-jwt/decode?

The latest version of @sd-jwt/decode is 0.19.0, released 2026-01-23.

Does @sd-jwt/decode have known vulnerabilities?

No known vulnerabilities on the latest version of @sd-jwt/decode.

Is @sd-jwt/decode deprecated?

Yes, @sd-jwt/decode is deprecated: Merged into @sd-jwt/core (>= 0.20.0). Security: GHSA-f9j6-8p6x-r9j6. Consider using ? instead.

What are alternatives to @sd-jwt/decode?

Popular alternatives to @sd-jwt/decode in npm include: ?, semver, ansi-styles, brace-expansion, lru-cache.

What license does @sd-jwt/decode use?

@sd-jwt/decode is licensed under Apache-2.0.

@sd-jwt/decode

npmv0.19.0deprecated

sd-jwt draft 7 implementation in typescript

License Apache-2.0permissive190 versions1 maintainers2 deps42,668 weekly dl

openwallet-foundation/sd-jwt-js

32

/ 100

Health

find alternative

@sd-jwt/decode is deprecated — find an alternative

Moderate health score (32/100) — verify manually
Package is deprecated

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

0

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

@sd-jwt/types @sd-jwt/utils

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@sd-jwt/decode