Package Health

request

Simplified HTTP request client.

Latest 2.88.2NPMNPM

15%

Total Score

critical

The package is deprecated, with no releases in over six years and no commits in the last three months.

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecationdanger

The registry marks the entire package as deprecated and provides no replacement package. This directly indicates that new projects should not adopt the release.

Release historydanger

The package has had no releases in over six years, despite a historically active release cadence. That strongly indicates abandonment for dependency adoption.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. The unarchived repository does not compensate for the lack of current development activity.

Vulnerabilities

TitleVersionsSeverity
CVE-2023-28155
request is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.0.0 - 2.88.2.
0.0.0 - 2.88.2
Medium
CVE-2017-16026
request is vulnerable to Insertion of Sensitive Information Into Sent Data in versions 2.49.0 - 2.68.0 and 2.2.6 - 2.47.0.
2.2.6 - 2.47.02.49.0 - 2.68.0
Medium

Package versions

Direct Dependencies

DependencyLast ReleaseScore
qs
Version ~6.5.2
—
—
aws4
Version ^1.8.0
—
—
uuid
Version ^3.3.2
—
—
extend
Version ~3.0.2
—
—
caseless
Version ~0.12.0
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
15 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform