Is It Dead Yet? dependency vitals

@solana/web3.jsnpm

Signals · last 1 check

Commits 90d
3
Open issues
17
Unanswered
6
Contributors
2
State history 1
WhenChange
2026-09-03 first verdict: active
Supply-chain history 1
  1. account hijacked 2024-12 1.95.6, 1.95.7

    A publish-access account was compromised and two versions that exfiltrated private key material were live for about five hours.

    Unpublished the same day; 1.95.8 released; CVE-2024-54134.

    Source: GitHub advisory GHSA-jcxm-7wvp-g6p5, 4 December 2024. History, not a warning about today — the verdict above is about maintenance now.

Badge

maintenance: active

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/npm/@solana/web3.js.svg)](https://isitdeadyet.dev/npm/@solana/web3.js)

Watch it

Get told when @solana/web3.js changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.