Provides a way to make requests
18%
Total Score
100
100
69
100
The entire package is deprecated, with npm stating that it has moved to @smithy/node-http-handler. This directly makes the assessed release unfit for a new dependency despite the project's active source repository.
The package has 140 releases and historically released about weekly, but its latest release was more than three years ago and there were no releases in the last 12 months. Active repository work does not compensate for this package's stopped release line.
The repository name does not match the package and its README does not mention the package, so the link is not specifically transparent. The AWS monorepo backing provides context, but this remains a minor traceability concern.
The repository uses established build and test tooling, including TypeScript, Vitest, and multiple build systems. No security-scanning tools were detected, but the active organization-owned project provides some compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.5.0 | — | — |
@smithy/node-http-handler Version ^1.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.