Is node-fetch safe to use?

node-fetch has no known vulnerabilities on the latest version (3.3.2). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of node-fetch?

The latest version of node-fetch is 3.3.2, released 2023-07-25.

Does node-fetch have known vulnerabilities?

No known vulnerabilities on the latest version of node-fetch.

Is node-fetch deprecated?

No, node-fetch is actively maintained. Latest release: 3.3.2 (2023-07-25).

What are alternatives to node-fetch?

Popular alternatives to node-fetch in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does node-fetch use?

node-fetch is licensed under MIT.

node-fetch

npmv3.3.2

A light-weight module that brings Fetch API to node.js

License MITpermissive96 versions5 maintainers3 deps120,615,623 weekly dl

node-fetch/node-fetch

/ 100

Health

use with caution

[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

20/20

popularity

25/25

security

15/15

maturity

5/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

83.0 KBminified

22.6 KB gzipped

3 direct dependencies

🌟

TypeScript

10/10typed

bundled

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

0

Primary author dominance

0%

GitHub stars

8,857

single active maintainer 3m

Quality signals

OSS Criticality

0.88critical

Download trend

stable(0%)

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (3)

data-uri-to-buffer fetch-blob formdata-polyfill

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/node-fetch