Is @polkadot/api safe to use?

@polkadot/api has no known vulnerabilities on the latest version (16.5.6). DepScope rates its health at 64/100 (moderate risk).

What is the latest version of @polkadot/api?

The latest version of @polkadot/api is 16.5.6, released 2026-03-23.

Does @polkadot/api have known vulnerabilities?

No known vulnerabilities on the latest version of @polkadot/api.

Is @polkadot/api deprecated?

No, @polkadot/api is actively maintained. Latest release: 16.5.6 (2026-03-23).

What are alternatives to @polkadot/api?

Popular alternatives to @polkadot/api in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @polkadot/api use?

@polkadot/api is licensed under Apache-2.0.

@polkadot/api

npmv16.5.6

Promise and RxJS wrappers around the Polkadot JS RPC

License Apache-2.0permissive3326 versions3 maintainers17 deps

polkadot-js/api

/ 100

Health

safe to use

@polkadot/[email protected] is safe to use (health: 64/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (17)

@polkadot/api-augment @polkadot/api-base @polkadot/api-derive @polkadot/keyring @polkadot/rpc-augment @polkadot/rpc-core @polkadot/rpc-provider @polkadot/types @polkadot/types-augment @polkadot/types-codec @polkadot/types-create @polkadot/types-known @polkadot/util @polkadot/util-crypto eventemitter3 rxjs tslib

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@polkadot/api