Is a2a-js safe to use?

a2a-js has no known vulnerabilities on the latest version (0.2.0). DepScope rates its health at 39/100 (critical risk).

What is the latest version of a2a-js?

The latest version of a2a-js is 0.2.0, released 2025-05-15.

Does a2a-js have known vulnerabilities?

No known vulnerabilities on the latest version of a2a-js.

Is a2a-js deprecated?

No, a2a-js is actively maintained. Latest release: 0.2.0 (2025-05-15).

What are alternatives to a2a-js?

Popular alternatives to a2a-js in npm include: ?, semver, ansi-styles, minimatch, debug.

What license does a2a-js use?

a2a-js is licensed under Apache-2.0.

a2a-js

npmv0.2.0

JavaScript SDK for the Agent2Agent (A2A) Protocol - enabling communication between AI agents

License Apache-2.0permissive4 versions1 maintainers6 deps5,285 weekly dl

techurbanist/a2a-js

/ 100

Health

use with caution

[email protected] low health (39/100) — consider alternatives

Moderate health score (39/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

853.0 KBminified

378.1 KB gzipped

6 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (6)

axios cors eventsource express jsonschema uuid

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/a2a-js