Is @openzeppelin/merkle-tree safe to use?

@openzeppelin/merkle-tree has no known vulnerabilities on the latest version (1.0.8). DepScope rates its health at 51/100 (high risk).

What is the latest version of @openzeppelin/merkle-tree?

The latest version of @openzeppelin/merkle-tree is 1.0.8, released 2025-02-19.

Does @openzeppelin/merkle-tree have known vulnerabilities?

No known vulnerabilities on the latest version of @openzeppelin/merkle-tree.

Is @openzeppelin/merkle-tree deprecated?

No, @openzeppelin/merkle-tree is actively maintained. Latest release: 1.0.8 (2025-02-19).

What are alternatives to @openzeppelin/merkle-tree?

Popular alternatives to @openzeppelin/merkle-tree in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @openzeppelin/merkle-tree use?

@openzeppelin/merkle-tree is licensed under MIT.

@openzeppelin/merkle-tree

npmv1.0.8

Utilities to work with merkle trees

License MITpermissive9 versions7 maintainers2 deps45,211 weekly dl

OpenZeppelin/merkle-tree

/ 100

Health

use with caution

@openzeppelin/[email protected] low health (51/100) — consider alternatives

Moderate health score (51/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

@metamask/abi-utils ethereum-cryptography

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@openzeppelin/merkle-tree