Is @helia/http safe to use?

@helia/http has no known vulnerabilities on the latest version (4.0.6). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of @helia/http?

The latest version of @helia/http is 4.0.6, released 2026-07-28.

Does @helia/http have known vulnerabilities?

No known vulnerabilities on the latest version of @helia/http.

Is @helia/http deprecated?

No, @helia/http is actively maintained. Latest release: 4.0.6 (2026-07-28).

What are alternatives to @helia/http?

Popular alternatives to @helia/http in npm include: ?, semver, debug, minimatch.

What license does @helia/http use?

@helia/http is licensed under Apache-2.0 OR MIT.

@helia/http

npmv4.0.6

A lightweight implementation of IPFS over HTTP in JavaScript

License Apache-2.0 OR MITpermissive385 versions2 maintainers4 deps1,944 weekly dl

ipfs/helia

/ 100

Health

use with caution

@helia/[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@helia/interface @helia/fallback-router @helia/delegated-routing-client @helia/trustless-gateway-client

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@helia/http