http-proxy-middleware 4.0.0-beta.5

The one-liner node.js proxy middleware for connect, express, next.js and more

http-proxy-middleware@4.0.0-beta.5 was published on 2026-04-26. Its manifest declares 5 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is ^22.12.0 || >=24.0.0.

All http-proxy-middleware versions · Permanent reference to 4.0.0-beta.5 · Latest release

Package specifications

Version	4.0.0-beta.5
License declaration	MIT
Published	2026-04-26T12:32:48.528Z
Node.js requirement	^22.12.0 \|\| >=24.0.0
Type declarations	Bundled declarations
Runtime dependency count	5
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	79.97 KiB
Published file count	59
Package type	module
ES module entry	Not declared
Default entry	dist/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	12
Repository stars	11130
Repository forks	877

Install http-proxy-middleware 4.0.0-beta.5

npm install http-proxy-middleware@4.0.0-beta.5
pnpm add http-proxy-middleware@4.0.0-beta.5
yarn add http-proxy-middleware@4.0.0-beta.5

Runtime dependencies

debug ^4.4.3
httpxy ^0.5.1
is-glob ^4.0.3
micromatch ^4.0.8
is-plain-obj ^4.1.0

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

braces@3.0.3 — indirect
debug@4.4.3 — direct
fill-range@7.1.1 — indirect
httpxy@0.5.6 — direct
is-extglob@2.1.1 — indirect
is-glob@4.0.3 — direct
is-number@7.0.0 — indirect
is-plain-obj@4.1.0 — direct
micromatch@4.0.8 — direct
ms@2.1.3 — indirect
picomatch@2.3.2 — indirect
to-regex-range@5.0.1 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	0/10 — Found 1/30 approved changesets -- score normalized to 0
Maintained	10/10 — 24 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Token-Permissions	9/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
Security-Policy	0/10 — security policy file not detected
License	10/10 — license file detected
Fuzzing	0/10 — project is not fuzzed
Packaging	10/10 — packaging workflow detected
Branch-Protection	1/10 — branch protection is not maximal on development and all release branches
SAST	9/10 — SAST tool is not run on all commits -- score normalized to 9

Evidence and freshness

https://registry.npmjs.org/http-proxy-middleware/4.0.0-beta.5 — retrieved 2026-10-29T10:11:31.975Z
https://api.deps.dev/v3/projects/github.com%2Fchimurai%2Fhttp-proxy-middleware — retrieved 2026-10-29T08:05:31.280Z
https://api.deps.dev/v3/systems/npm/packages/http-proxy-middleware/versions/4.0.0-beta.5 — retrieved 2026-10-29T10:11:32.494Z
https://api.deps.dev/v3/systems/npm/packages/http-proxy-middleware/versions/4.0.0-beta.5:dependencies — retrieved 2026-10-29T10:11:32.524Z