Is @did-connect/handler safe to use?

@did-connect/handler has no known vulnerabilities on the latest version (2.2.8). DepScope rates its health at 55/100 (high risk).

What is the latest version of @did-connect/handler?

The latest version of @did-connect/handler is 2.2.8, released 2025-05-12.

Does @did-connect/handler have known vulnerabilities?

No known vulnerabilities on the latest version of @did-connect/handler.

Is @did-connect/handler deprecated?

No, @did-connect/handler is actively maintained. Latest release: 2.2.8 (2025-05-12).

What are alternatives to @did-connect/handler?

Popular alternatives to @did-connect/handler in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @did-connect/handler use?

@did-connect/handler is licensed under Apache-2.0.

@did-connect/handler

npmv2.2.8

Abstract handler for did-connect relay server

License Apache-2.0permissive81 versions1 maintainers13 deps361 weekly dl

ArcBlock/did-connect

/ 100

Health

use with caution

@did-connect/[email protected] low health (55/100) — consider alternatives

Moderate health score (55/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

3/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

696.6 KBminified

214.2 KB gzipped

13 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (13)

@arcblock/did @arcblock/jwt @arcblock/ws @did-connect/authenticator @did-connect/storage @did-connect/types @ocap/mcrypto @ocap/util axios lodash object-hash p-wait-for semver

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@did-connect/handler