Gathering detailed insights and metrics for @mocks-server/plugin-proxy
Gathering detailed insights and metrics for @mocks-server/plugin-proxy
Node.js mock server running live, interactive mocks in place of real APIs
Installations
npm install @mocks-server/plugin-proxyDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Min. Node Version
>=14.0.0
Node Version
16.17.0
NPM Version
8.15.0
Score
56.5
Supply Chain
87.9
Quality
69.7
Maintenance
50
Vulnerability
97.3
License
Releases
61
Improve typings
v5.0.0-beta.4
Updated on Jun 06, 2023
Support openapi example property
v4.1.0
Updated on May 29, 2023
Config: support nullable arrays and objects
v5.0.0-beta.3
Updated on May 25, 2023
Fix plugins peerDependencies
v5.0.0-beta.2
Updated on May 24, 2023
Migrating to TypeScript
v5.0.0-beta.1
Updated on May 23, 2023
Fix OpenAPI paths with multiple params
v4.0.1
Updated on Apr 09, 2023
Languages
6
JavaScript
TypeScript
HTML
Handlebars
CSS
Shell
JavaScript (94.13%)
TypeScript (4.66%)
HTML (0.62%)
Handlebars (0.3%)
CSS (0.22%)
Shell (0.06%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
Apache-2.0 License
304 Stars
4,048 Commits
18 Forks
3 Watchers
6 Branches
4 Contributors
Updated on Jun 30, 2025
Maintainers
1
Package Meta Information
Latest Version
4.0.0
Package Id
@mocks-server/plugin-proxy@4.0.0
Unpacked Size
15.74 kB
Size
3.65 kB
File Count
6
NPM Version
8.15.0
Node Version
16.17.0
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Peer Dependencies
1
Dev Dependencies
1
Mocks Server Plugin Proxy
Plugin for Mocks Server that provides a variant handler that proxy requests to another host and pass response back to original caller.
It uses the express-http-proxy package under the hood, and supports all of its options.
Important: From v3.0.0, this plugin includes two route handlers:
proxyandproxy-v4. This was made to allow Mocks Server v3 users to progressively adapt their code to Mocks Server v4 without breaking changes. It is strongly recommended to use theproxy-v4handler. In the next major release, backward compatibilty will be removed and theproxyhandler will be replaced byproxy-v4.
Usage of proxy-v4 handler
This plugin is included in the main distribution of the Mocks Server project, so you can also read the official documentation website.
Proxy routes
If you want a route variant to use the proxy-v4 handler, define its handler property as "proxy-v4". Use the host property to set the host for the route, and the options property to set any of the express-http-proxy options.
1module.exports = [ 2 { 3 id: "proxy-all", 4 url: "*", 5 method: ["GET", "POST", "PATCH", "PUT"], 6 variants: [ 7 { 8 id: "proxy-to-google", 9 type: "proxy-v4", // This route variant will use the "proxy" handler from this plugin 10 options: { 11 host: "https://www.google.com", // proxy host 12 options: {}, // Options for express-http-proxy 13 }, 14 }, 15 ], 16 }, 17];
Options
Here are listed the specific properties that can be defined in a proxy-v4 route variant. They must be defined in the options property of the variant:
host(String|Function): The proxy host. Equivalent to theexpress-http-proxyhostoption, so it can also be a function.options(Object): Object containing any of the options supported by theexpress-http-proxypackage. Some of them are:- filter (Function):
filteroption forexpress-http-proxy. - userResDecorator (Function):
userResDecoratoroption forexpress-http-proxy. - ... all other
express-http-proxyoptions are also supported.
- filter (Function):
Tip: Note that the variant
delayoption is still valid for routes handled by this plugin, so you can use it to simulate that host responses are slow.
Usage of proxy handler
Proxy routes
If you want a Mocks Server v3 route variant to use the proxy handler, define its type property as "proxy". Use the host property to set the host for the route, and the options property to set any of the express-http-proxy options.
1module.exports = [ 2 { 3 id: "proxy-all", 4 url: "*", 5 method: ["GET", "POST", "PATCH", "PUT"], 6 variants: [ 7 { 8 id: "proxy-to-google", 9 type: "proxy", // This route variant will use the "proxy" handler from this plugin 10 host: "https://www.google.com", // proxy host 11 options: {}, // Options for express-http-proxy 12 }, 13 ], 14 }, 15];
Route variant options
Mocks server common properties to all route handlers are in cursive. Specific properties of this plugin are in bold:
host(String|Function): The proxy host. Equivalent to theexpress-http-proxyhostoption, so it can also be a function.options(Object): Object containing any of the options supported by theexpress-http-proxypackage. Some of them are:- filter (Function):
filteroption forexpress-http-proxy. - userResDecorator (Function):
userResDecoratoroption forexpress-http-proxy. - ... all other
express-http-proxyoptions are also supported.
- filter (Function):
Tip: Note that the
delayoption is still valid for routes handled by this plugin, so you can use it to simulate that host responses are slow.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
Found 1/13 approved changesets -- score normalized to 0
Reason
0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/affected-projects.yml:1
- Warn: no topLevel permission defined: .github/workflows/build.yml:1
- Warn: no topLevel permission defined: .github/workflows/check-affected.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-to-github.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-to-npm.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/affected-projects.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/affected-projects.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/affected-projects.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/affected-projects.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/affected-projects.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/affected-projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/affected-projects.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/affected-projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/affected-projects.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/affected-projects.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/affected-projects.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/affected-projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:180: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:192: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:221: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:269: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:291: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:297: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:305: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-affected.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/check-affected.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-affected.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/check-affected.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-affected.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/check-affected.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-affected.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/check-affected.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-affected.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/check-affected.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-affected.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/check-affected.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-to-github.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/publish-to-github.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-to-github.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/publish-to-github.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-to-github.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/publish-to-github.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-to-github.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/publish-to-github.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-to-npm.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/publish-to-npm.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-to-npm.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/publish-to-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-to-npm.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/mocks-server/main/publish-to-npm.yml/master?enable=pin
- Info: 0 out of 32 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 21 third-party GitHubAction dependencies pinned
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
75 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2jc-4fpr-4vhg
- Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
- Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
- Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-h452-7996-h45h
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q
- Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
- Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
- Warn: Project is vulnerable to: GHSA-6h5x-7c5m-7cr7
- Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-33f9-j839-rf8h
- Warn: Project is vulnerable to: GHSA-c36v-fmgq-m8hx
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
- Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
- Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
- Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
- Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
- Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
- Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
- Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
- Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
- Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-g4rg-993r-mgx7
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
- Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
- Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
2.8
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More