Is @1password/connect safe to use?

@1password/connect has no known vulnerabilities on the latest version (1.4.2). DepScope rates its health at 59/100 (high risk).

What is the latest version of @1password/connect?

The latest version of @1password/connect is 1.4.2, released 2025-07-17.

Does @1password/connect have known vulnerabilities?

No known vulnerabilities on the latest version of @1password/connect.

Is @1password/connect deprecated?

No, @1password/connect is actively maintained. Latest release: 1.4.2 (2025-07-17).

What are alternatives to @1password/connect?

Popular alternatives to @1password/connect in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does @1password/connect use?

@1password/connect is licensed under MIT.

@1password/connect

npmv1.4.2

JavaScript/Typescript SDK for 1Password Connect

License MITpermissive12 versions1 maintainers5 deps95,107 weekly dl

1Password/connect-sdk-js

/ 100

Health

use with caution

@1password/[email protected] low health (59/100) — consider alternatives

Moderate health score (59/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

100.1 KBminified

33.0 KB gzipped

5 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (5)

axios debug lodash.clonedeep slugify uuid

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@1password/connect