Promise based HTTP client for the browser and node.js
35%
Total Score
75
100
56
100
50
The package has only one release, published about 32 months ago, with no releases in the last 12 months. This provides little evidence of continued maintenance.
The repository name matches extrareqp2, but its README identifies the project as axios and does not mention this package. That mismatch weakens confidence that the source repository documents the published package.
No build provenance attestation or trusted publisher information is available. This reduces publication transparency, though it is not by itself evidence that the release is unsafe.
There is one open issue and no new or closed issues or pull requests in the last month. This is consistent with a very small or inactive project.
The repository has 1 star, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very small numbers provide little external validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
follow-redirects Version ^1.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.