Is @onflow/sdk safe to use?

@onflow/sdk has no known vulnerabilities on the latest version (1.13.7). DepScope rates its health at 66/100 (moderate risk).

What is the latest version of @onflow/sdk?

The latest version of @onflow/sdk is 1.13.7, released 2025-12-12.

Does @onflow/sdk have known vulnerabilities?

No known vulnerabilities on the latest version of @onflow/sdk.

Is @onflow/sdk deprecated?

No, @onflow/sdk is actively maintained. Latest release: 1.13.7 (2025-12-12).

What are alternatives to @onflow/sdk?

Popular alternatives to @onflow/sdk in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @onflow/sdk use?

@onflow/sdk is licensed under Apache-2.0.

@onflow/sdk

npmv1.13.7

Low-level JavaScript/TypeScript SDK for interacting with the Flow blockchain.

License Apache-2.0permissive190 versions16 maintainers15 deps8,846 weekly dl

onflow/fcl-js

/ 100

Health

use with caution

@onflow/[email protected] low health (66/100) — consider alternatives

Moderate health score (66/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

113.4 KBminified

30.9 KB gzipped

15 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (15)

@babel/runtime @onflow/config @onflow/rlp @onflow/transport-http @onflow/typedefs @onflow/types @onflow/util-actor @onflow/util-address @onflow/util-invariant @onflow/util-logger @onflow/util-template deepmerge events sha3 uuid

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@onflow/sdk