Is @libp2p/yamux safe to use?

@libp2p/yamux has no known vulnerabilities on the latest version (8.0.1). DepScope rates its health at 55/100 (high risk).

What is the latest version of @libp2p/yamux?

The latest version of @libp2p/yamux is 8.0.1, released 2025-09-24.

Does @libp2p/yamux have known vulnerabilities?

No known vulnerabilities on the latest version of @libp2p/yamux.

Is @libp2p/yamux deprecated?

No, @libp2p/yamux is actively maintained. Latest release: 8.0.1 (2025-09-24).

What are alternatives to @libp2p/yamux?

Popular alternatives to @libp2p/yamux in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @libp2p/yamux use?

@libp2p/yamux is licensed under Apache-2.0 OR MIT.

@libp2p/yamux

npmv8.0.1

Yamux stream multiplexer for libp2p

License Apache-2.0 OR MITpermissive16 versions6 maintainers4 deps4,383 weekly dl

libp2p/js-libp2p

/ 100

Health

safe to use

@libp2p/[email protected] is safe to use (health: 55/100)

Health breakdown0 – 100

10/25

maintenance

6/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

38.9 KBminified

10.7 KB gzipped

4 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

race-signal @libp2p/utils uint8arraylist @libp2p/interface

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@libp2p/yamux