Is http-proxy-middleware safe to use?

http-proxy-middleware has no known vulnerabilities on the latest version (3.0.5). DepScope rates its health at 54/100 (high risk).

What is the latest version of http-proxy-middleware?

The latest version of http-proxy-middleware is 3.0.5, released 2025-04-10.

Does http-proxy-middleware have known vulnerabilities?

No known vulnerabilities on the latest version of http-proxy-middleware.

Is http-proxy-middleware deprecated?

No, http-proxy-middleware is actively maintained. Latest release: 3.0.5 (2025-04-10).

What are alternatives to http-proxy-middleware?

Popular alternatives to http-proxy-middleware in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does http-proxy-middleware use?

http-proxy-middleware is licensed under MIT.

http-proxy-middleware

npmv3.0.5

The one-liner node.js proxy middleware for connect, express, next.js and more

License MITpermissive97 versions1 maintainers6 deps

chimurai/http-proxy-middleware

/ 100

Health

safe to use

[email protected] is safe to use (health: 54/100)

Health breakdown0 – 100

5/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

9/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

16.2 KBminified

5.1 KB gzipped

6 direct dependencies

side effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Download trend

stable(+2.4%)

Publish security

npm attested

Health History

Dependency Tree

License Audit

Dependencies (6)

debug is-glob http-proxy micromatch is-plain-object @types/http-proxy

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/http-proxy-middleware