The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.
18%
Total Score
50
71
The package is deprecated at the package level because it extends the deprecated request package, with no replacement specified. This is a severe adoption and abandonment risk.
The latest release was on July 22, 2020, with no releases in the last 12 months; the package has been without a release for more than 6 years. This strongly indicates inactive maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. Together with the old latest release, this indicates that maintenance has effectively stopped.
There were no new or closed issues or pull requests in the last month, while 13 issues and 3 pull requests remain open. This provides no evidence of active issue management.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tough-cookie Version ^2.3.3 | — | — |
stealthy-require Version ^1.1.1 | — | — |
request-promise-core Version 1.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.