Is @chainlink/contracts safe to use?

@chainlink/contracts has no known vulnerabilities on the latest version (1.5.0). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of @chainlink/contracts?

The latest version of @chainlink/contracts is 1.5.0, released 2025-09-30.

Does @chainlink/contracts have known vulnerabilities?

No known vulnerabilities on the latest version of @chainlink/contracts.

Is @chainlink/contracts deprecated?

No, @chainlink/contracts is actively maintained. Latest release: 1.5.0 (2025-09-30).

What are alternatives to @chainlink/contracts?

Popular alternatives to @chainlink/contracts in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @chainlink/contracts use?

@chainlink/contracts is licensed under BUSL-1.1.

@chainlink/contracts

npmv1.5.0

Chainlink smart contracts

License BUSL-1.164 versions8 maintainers14 deps42,521 weekly dl

smartcontractkit/chainlink-evm

/ 100

Health

use with caution

@chainlink/[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

10/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (14)

semver @changesets/cli @eslint/eslintrc @zksync/contracts @scroll-tech/contracts @eth-optimism/contracts @arbitrum/nitro-contracts @changesets/get-github-info @openzeppelin/contracts-4.7.3 @openzeppelin/contracts-4.8.3 @openzeppelin/contracts-4.9.6 @openzeppelin/contracts-5.0.2 @openzeppelin/contracts-5.1.0 @openzeppelin/contracts-upgradeable

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@chainlink/contracts