@npmcli/agent
the http/https agent used by the npm cli
68%
Total Score
caution
Usable with caveats: no commits in the last 3 months and all 38 workflow actions are unpinned.
Health Score Breakdown
The repository recorded 0 commits and 0 active maintainers over the last 3 months, which is a meaningful maintenance warning despite the recent registry release.
No type declarations are published, which is a minor integration gap for consumers using typed JavaScript or TypeScript, but the package supplies a README with usage guidance.
All 38 analyzed workflow action references are unpinned, and four workflows grant top-level write permissions; high-confidence template-injection findings are present, although no untrusted checkout or script-injection sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lru-cache Version ^11.2.1 | — | — |
agent-base Version ^9.0.0 | — | — |
http-proxy-agent Version ^9.0.0 | — | — |
https-proxy-agent Version ^9.0.0 | — | — |
socks-proxy-agent Version ^10.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.