mockttp
Healthy and suitable to install. It has a long, active release history, current repository activity, verified publishing provenance, and strong source documentation, though most recent commits come from one contributor and the dependency set is substantial.
88%
Total Score
90
50
100
88
100
Health Score Breakdown
Forty runtime dependencies create a meaningful maintenance and transitive-risk surface, although this is consistent with a substantial HTTP proxy library.
One contributor made about 91% of the last three months' commits, creating concentration risk; two additional contributors remained active, and organization backing partly compensates.
The workflow lacks top-level token permissions and declares only job-level permissions, leaving some permission-hardening ambiguity but no declared write access.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-69146 mockttp is vulnerable to Binding to an Unrestricted IP Address in versions 0.0.1 - 3.17.1 and 4.0.0 - 4.5.0. | 0.0.1 - 3.17.14.0.0 - 4.5.0 | High |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ws Version ^8.20.0 | — | — |
cors Version ^2.8.4 | — | — |
lodash Version ^4.16.4 | — | — |
semver Version ^7.5.3 | — | — |
connect Version ^3.7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 10 years ago
- Unpacked Size
- 1.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.