Is web3-core-method safe to use?

web3-core-method has 1 known vulnerabilities on the latest version (1.10.3). DepScope rates its health at 54/100 (high risk).

What is the latest version of web3-core-method?

The latest version of web3-core-method is 1.10.3, released 2023-10-18.

Does web3-core-method have known vulnerabilities?

Yes. web3-core-method has 1 known vulnerabilities. See depscope.dev/pkg/npm/web3-core-method for details.

Is web3-core-method deprecated?

No, web3-core-method is actively maintained. Latest release: 1.10.3 (2023-10-18).

What are alternatives to web3-core-method?

Popular alternatives to web3-core-method in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does web3-core-method use?

web3-core-method is licensed under LGPL-3.0.

web3-core-method

npmv1.10.3

Creates the methods on the web3 modules. This is an internal package.

License LGPL-3.0weak copyleft137 versions1 maintainers5 deps516,757 weekly dl

ethereum/web3.js

/ 100

Health

use with caution

[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 low

Advisories (1)

Severity	ID	Summary	Fixed in
low	CVE-2025-57329	web3-core-method is vulnerable to prototype pollution	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

web3-utils web3-core-helpers web3-core-promievent web3-core-subscriptions @ethersproject/transactions

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/web3-core-method

web3-core-method

npmv1.10.3

Creates the methods on the web3 modules. This is an internal package.

License LGPL-3.0weak copyleft137 versions1 maintainers5 deps516,757 weekly dl

ethereum/web3.js

/ 100

Health

use with caution

[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

0/15

community

0/15

popularity_floor

Vulnerabilities

1 low

Advisories (1)

Severity	ID	Summary	Fixed in
low	CVE-2025-57329	web3-core-method is vulnerable to prototype pollution	—

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

web3-utils web3-core-helpers web3-core-promievent web3-core-subscriptions @ethersproject/transactions

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/web3-core-method