Is libp2p-gossipsub safe to use?

libp2p-gossipsub has no known vulnerabilities on the latest version (0.13.0). DepScope rates its health at 58/100 (high risk).

What is the latest version of libp2p-gossipsub?

The latest version of libp2p-gossipsub is 0.13.0, released 2022-01-20.

Does libp2p-gossipsub have known vulnerabilities?

No known vulnerabilities on the latest version of libp2p-gossipsub.

Is libp2p-gossipsub deprecated?

No, libp2p-gossipsub is actively maintained. Latest release: 0.13.0 (2022-01-20).

What are alternatives to libp2p-gossipsub?

Popular alternatives to libp2p-gossipsub in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does libp2p-gossipsub use?

libp2p-gossipsub is licensed under Apache-2.0.

libp2p-gossipsub

npmv0.13.0

A typescript implementation of gossipsub

License Apache-2.0permissive50 versions4 maintainers9 deps

ChainSafe/js-libp2p-gossipsub

/ 100

Health

use with caution

[email protected] low health (58/100) — consider alternatives

Moderate health score (58/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

6/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

367.6 KBminified

102.5 KB gzipped

9 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (9)

@types/debug debug denque err-code it-pipe libp2p-interfaces peer-id protobufjs uint8arrays

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/libp2p-gossipsub