Is @tma.js/bridge safe to use?

@tma.js/bridge has no known vulnerabilities on the latest version (2.3.0). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of @tma.js/bridge?

The latest version of @tma.js/bridge is 2.3.0, released 2026-04-03.

Does @tma.js/bridge have known vulnerabilities?

No known vulnerabilities on the latest version of @tma.js/bridge.

Is @tma.js/bridge deprecated?

No, @tma.js/bridge is actively maintained. Latest release: 2.3.0 (2026-04-03).

What are alternatives to @tma.js/bridge?

Popular alternatives to @tma.js/bridge in npm include: minimatch, commander, eslint-visitor-keys, ajv, color-name.

What license does @tma.js/bridge use?

@tma.js/bridge is licensed under MIT.

@tma.js/bridge

npmv2.3.0

TypeScript package to provide communication layer between Mini App and Telegram application.

License MITpermissive28 versions1 maintainers9 deps12,323 weekly dl

ssh://[email protected]/Telegram-Mini-Apps/tma.js

/ 100

Health

safe to use

@tma.js/[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

35.4 KBminified

12.0 KB gzipped

9 direct dependencies

ESMscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (9)

better-promises error-kid fp-ts mitt valibot @tma.js/signals @tma.js/toolkit @tma.js/transformers @tma.js/types

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tma.js/bridge