Is http-post-message safe to use?

http-post-message has no known vulnerabilities on the latest version (0.3.0). DepScope rates its health at 61/100 (moderate risk).

What is the latest version of http-post-message?

The latest version of http-post-message is 0.3.0, released 2026-03-03.

Does http-post-message have known vulnerabilities?

No known vulnerabilities on the latest version of http-post-message.

Is http-post-message deprecated?

No, http-post-message is actively maintained. Latest release: 0.3.0 (2026-03-03).

What are alternatives to http-post-message?

Popular alternatives to http-post-message in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does http-post-message use?

http-post-message is licensed under MIT.

http-post-message

npmv0.3.0

A generic messaging component to send HTTP style message payloads over the window.postMessage API. Requires an implementation of window postMessage proxy such as 'window-post-message-proxy'.

License MITpermissive10 versions3 maintainers1 deps

Microsoft/http-post-message

/ 100

Health

safe to use

[email protected] is safe to use (health: 61/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (1)

es6-promise

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/http-post-message