Is @tonconnect/protocol safe to use?

@tonconnect/protocol has no known vulnerabilities on the latest version (2.4.0). DepScope rates its health at 55/100 (high risk).

What is the latest version of @tonconnect/protocol?

The latest version of @tonconnect/protocol is 2.4.0, released 2026-01-28.

Does @tonconnect/protocol have known vulnerabilities?

No known vulnerabilities on the latest version of @tonconnect/protocol.

Is @tonconnect/protocol deprecated?

No, @tonconnect/protocol is actively maintained. Latest release: 2.4.0 (2026-01-28).

What are alternatives to @tonconnect/protocol?

Popular alternatives to @tonconnect/protocol in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @tonconnect/protocol use?

@tonconnect/protocol is licensed under Apache-2.0.

@tonconnect/protocol

npmv2.4.0

ℹ️ If you want to integrate TonConnect to your dApp, you should use [@tonconnect/sdk](https://www.npmjs.com/package/@tonconnect/sdk)

License Apache-2.0permissive43 versions2 maintainers2 deps

ton-connect/sdk

/ 100

Health

safe to use

@tonconnect/[email protected] is safe to use (health: 55/100)

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

35.9 KBminified

11.9 KB gzipped

2 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

tweetnacl tweetnacl-util

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tonconnect/protocol