Is @tezos-x/octez.js-signer safe to use?

@tezos-x/octez.js-signer has no known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 43/100 (high risk).

What is the latest version of @tezos-x/octez.js-signer?

The latest version of @tezos-x/octez.js-signer is 1.0.0, released 2026-02-16.

Does @tezos-x/octez.js-signer have known vulnerabilities?

No known vulnerabilities on the latest version of @tezos-x/octez.js-signer.

Is @tezos-x/octez.js-signer deprecated?

No, @tezos-x/octez.js-signer is actively maintained. Latest release: 1.0.0 (2026-02-16).

What are alternatives to @tezos-x/octez.js-signer?

Popular alternatives to @tezos-x/octez.js-signer in npm include: ?, semver, debug, minimatch.

What license does @tezos-x/octez.js-signer use?

@tezos-x/octez.js-signer is licensed under Apache-2.0.

@tezos-x/octez.js-signer

npmv1.0.0

Provide signing functionality to be used with octez.js

License Apache-2.0permissive2 versions5 maintainers14 deps10 weekly dl

trilitech/octez.js

/ 100

Health

use with caution

@tezos-x/[email protected] low health (43/100) — consider alternatives

Moderate health score (43/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (14)

bip39 bn.js pbkdf2 @types/bn.js @noble/curves @stablelib/hmac @stablelib/nacl @stablelib/pbkdf2 @stablelib/sha512 @stablelib/blake2b @stablelib/ed25519 typedarray-to-buffer @tezos-x/octez.js-core @tezos-x/octez.js-utils

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tezos-x/octez.js-signer