Is @libp2p/http-fetch safe to use?

@libp2p/http-fetch has no known vulnerabilities on the latest version (4.0.2). DepScope rates its health at 74/100 (moderate risk).

What is the latest version of @libp2p/http-fetch?

The latest version of @libp2p/http-fetch is 4.0.2, released 2026-04-28.

Does @libp2p/http-fetch have known vulnerabilities?

No known vulnerabilities on the latest version of @libp2p/http-fetch.

Is @libp2p/http-fetch deprecated?

No, @libp2p/http-fetch is actively maintained. Latest release: 4.0.2 (2026-04-28).

What are alternatives to @libp2p/http-fetch?

Popular alternatives to @libp2p/http-fetch in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @libp2p/http-fetch use?

@libp2p/http-fetch is licensed under Apache-2.0 OR MIT.

@libp2p/http-fetch

npmv4.0.2

libp2p-compatible implementation of the fetch API

License Apache-2.0 OR MITpermissive17 versions6 maintainers4 deps14,674 weekly dl

libp2p/js-libp2p-http

/ 100

Health

safe to use

@libp2p/[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@achingbrain/http-parser-js @libp2p/http-utils @libp2p/interface uint8arrays

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@libp2p/http-fetch

@libp2p/http-fetch

npmv4.0.2

libp2p-compatible implementation of the fetch API

License Apache-2.0 OR MITpermissive17 versions6 maintainers4 deps14,674 weekly dl

libp2p/js-libp2p-http

/ 100

Health

safe to use

@libp2p/[email protected] is safe to use (health: 74/100)

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

25/25

security

9/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@achingbrain/http-parser-js @libp2p/http-utils @libp2p/interface uint8arrays

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@libp2p/http-fetch