
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@axvn-vn/spl-token
Advanced tools
@solana/spl-tokenA TypeScript library for interacting with the SPL Token and Token-2022 programs.
[!IMPORTANT]
If you are using @solana/web3.js version 2 , you should use the@solana-program/tokenand@solana-program/token-2022packages instead.
Please ask questions in the Solana Stack Exchange: https://solana.stackexchange.com/
If you've found a bug or you'd like to request a feature, please open an issue.
Please see upgrading from 0.1.x.
npm install --save @solana/spl-token @solana/web3.js@1
OR
yarn add @solana/spl-token @solana/web3.js@1
If you have Node 16+, you can activate PNPM with Corepack.
git clone https://github.com/solana-program/token-2022.git
cd token-2022
make build-sbf-program
make build-sbf-confidential-elgamal-registry
cd clients/js-legacy
pnpm install
pnpm run build
pnpm run test
pnpm run example
There are no breaking changes from 0.2.0, only new functionality for Token-2022.
When upgrading from spl-token 0.1.x, you may see the following error in your code:
import {TOKEN_PROGRAM_ID, Token, AccountLayout} from '@solana/spl-token';
^^^^^
SyntaxError: The requested module '@solana/spl-token' does not provide an export named 'Token'
The @solana/spl-token library as of version 0.2.0 does not have the Token
class. Instead the actions are split up and exported separately.
To use the old version, install it with:
npm install @solana/spl-token@0.1.8
Otherwise you can find documentation on how to use new versions on the SPL docs or Solana Cookbook.
FAQs
SPL Token Program JS API
We found that @axvn-vn/spl-token demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.