Is @tinyhttp/app safe to use?

@tinyhttp/app has no known vulnerabilities on the latest version (3.0.7). DepScope rates its health at 68/100 (moderate risk).

What is the latest version of @tinyhttp/app?

The latest version of @tinyhttp/app is 3.0.7, released 2026-04-15.

Does @tinyhttp/app have known vulnerabilities?

No known vulnerabilities on the latest version of @tinyhttp/app.

Is @tinyhttp/app deprecated?

No, @tinyhttp/app is actively maintained. Latest release: 3.0.7 (2026-04-15).

What are alternatives to @tinyhttp/app?

Popular alternatives to @tinyhttp/app in npm include: minimatch, wrap-ansi, @types/node, eslint-visitor-keys, ajv.

What license does @tinyhttp/app use?

@tinyhttp/app is licensed under MIT.

@tinyhttp/app

npmv3.0.7

0-legacy, tiny & fast web framework as a replacement of Express

License MITpermissive316 versions2 maintainers7 deps

tinyhttp/tinyhttp

/ 100

Health

safe to use

@tinyhttp/[email protected] is safe to use (health: 68/100)

Health breakdown0 – 100

25/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

70.6 KBminified

23.2 KB gzipped

7 direct dependencies

side effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (7)

regexparam @tinyhttp/accepts @tinyhttp/cookie @tinyhttp/proxy-addr @tinyhttp/req @tinyhttp/res @tinyhttp/router

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@tinyhttp/app