Is @metaplex-foundation/mpl-token-metadata safe to use?

@metaplex-foundation/mpl-token-metadata has no known vulnerabilities on the latest version (3.4.0). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of @metaplex-foundation/mpl-token-metadata?

The latest version of @metaplex-foundation/mpl-token-metadata is 3.4.0, released 2025-02-02.

Does @metaplex-foundation/mpl-token-metadata have known vulnerabilities?

No known vulnerabilities on the latest version of @metaplex-foundation/mpl-token-metadata.

Is @metaplex-foundation/mpl-token-metadata deprecated?

No, @metaplex-foundation/mpl-token-metadata is actively maintained. Latest release: 3.4.0 (2025-02-02).

What are alternatives to @metaplex-foundation/mpl-token-metadata?

Popular alternatives to @metaplex-foundation/mpl-token-metadata in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @metaplex-foundation/mpl-token-metadata use?

@metaplex-foundation/mpl-token-metadata is licensed under Apache-2.0.

@metaplex-foundation/mpl-token-metadata

npmv3.4.0

JavaScript client for Token Metadata

License Apache-2.0permissive83 versions6 maintainers1 deps200,552 weekly dl

metaplex-foundation/mpl-candy-guard

/ 100

Health

use with caution

@metaplex-foundation/[email protected] low health (60/100) — consider alternatives

Moderate health score (60/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

6/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

@metaplex-foundation/mpl-toolbox

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@metaplex-foundation/mpl-token-metadata