Is http-request-signature safe to use?

http-request-signature has no known vulnerabilities on the latest version (0.0.5). DepScope rates its health at 41/100 (high risk).

What is the latest version of http-request-signature?

The latest version of http-request-signature is 0.0.5, released 2022-08-23.

Does http-request-signature have known vulnerabilities?

No known vulnerabilities on the latest version of http-request-signature.

Is http-request-signature deprecated?

No, http-request-signature is actively maintained. Latest release: 0.0.5 (2022-08-23).

What are alternatives to http-request-signature?

Popular alternatives to http-request-signature in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does http-request-signature use?

http-request-signature is licensed under MIT.

http-request-signature

npmv0.0.5

An HTTP signature parser and generator fully compliant with the proposed "Signing HTTP Messages" [Internet Draft](https://www.ietf.org/id/draft-cavage-http-signatures-07.txt).

License MITpermissive4 versions3 maintainers6 deps

/ 100

Health

use with caution

[email protected] low health (41/100) — consider alternatives

Moderate health score (41/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

4/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

166.1 KBminified

51.6 KB gzipped

6 direct dependencies

side effects

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (6)

debugnyan lodash standard-http-error tweetnacl validator.js validator.js-asserts

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/http-request-signature