Is har-validator still maintained?
No — har-validator stopped being maintained around July 2020. No single package succeeded har-validator; the fix depends on what you were using it for.
- Status
- No longer maintained
- Last maintained
- July 2020
- Use instead
- Nothing directly — remove the dependency
- Succession
- Replacement project
- Drop-in
- not applicable
- Confidence
- low
What replaced har-validator?
No single package succeeded har-validator; the fix depends on what you were using it for. There is nothing to swap in, so plan the change rather than the upgrade.
Getting off har-validator
Check whether anything actually calls it — it is almost always a transitive dependency of request. If you do validate HAR files directly, @har-sdk/validator is actively published, or validate against har-schema with ajv yourself.
Why har-validator is on this list
har-validator validates HTTP Archive objects and reached most dependency trees indirectly through request. Its final release, 5.1.5 in July 2020, carries the npm notice "this library is no longer supported", and no successor was named. Most projects only have it because of request, so removing request usually removes it too.
Reasonable engineers still disagree about the replacement — read the alternatives before committing.
har-validator alternatives
Beyond the primary recommendation, these are credible for har-validator's use case:
@har-sdk/validator— view on npmajv— view on npm
Check your own project for har-validator
npx dead-deps --all --min-state unmaintainedRun that in the directory holding your lockfile. If har-validator is anywhere in your tree — a direct dependency or buried under something else — it appears in the report with this verdict, this successor and the same evidence links, alongside anything else that has stopped moving. Nothing is uploaded; the scan reads your lockfile locally and queries public registry metadata.
Exit code 1 means something was flagged, which makes npx dead-deps --min-state deprecated usable as a CI gate. See how verdicts are produced.
Evidence
Every claim on this page traces to a primary source. Check them:
- npm deprecation notice for har-validator ("this library is no longer supported")npmjs.com
- Source repositorygithub.com
Packages related to har-validator
- @hapi/joiRenamed package: joi · unmaintained since March 2020
- csurfReplacement project: csrf-csrf · unmaintained since January 2020
- event-streamNo direct successor · unmaintained since November 2018
- requestReplacement project: undici · unmaintained since February 2020
- request-promiseReplacement project: got · unmaintained since July 2020
See the full index of covered packages, or read the methodology for how a verdict is reached and why a quiet package is not a dead one.