npmjs.org: undici

An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 8.1.0 (published 2 months ago)
• Last Synced: 2026-04-14T10:32:39.845Z (2 months ago)
• Versions: 281
• Dependent Packages: 1,956
• Dependent Repositories: 98,048
• Downloads: 112,506,668 Last month
• Docker Downloads: 2,620,660,081
• Rankings:
  • Dependent packages count: 0.04%
  • Docker downloads count: 0.046%
  • Downloads: 0.047%
  • Dependent repos count: 0.101%
  • Average: 0.545%
  • Stargazers count: 1.298%
  • Forks count: 1.736%
• Maintainers (3)
  • ronag
  • matteo.collina
  • ethan_arrowood
• Advisories:
  • Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
  • Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation
  • Undici has CRLF Injection in undici via `upgrade` option
  • Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
  • Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client
  • Undici has an HTTP Request/Response Smuggling issue
  • Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
  • undici Denial of Service attack via bad certificate data
  • Use of Insufficiently Random Values in undici
  • Undici vulnerable to data leak when using response.arrayBuffer()
  • Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
  • Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
  • Undici proxy-authorization header not cleared on cross-origin redirect in fetch
  • fetch(url) leads to a memory leak in undici
  • Undici's cookie header not cleared on cross-origin redirect in fetch
  • CRLF Injection in Nodejs ‘undici’ via host
  • Regular Expression Denial of Service in Headers
  • Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type
  • `undici.request` vulnerable to SSRF using absolute URL on `pathname`
  • undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
  • undici before v5.8.0 vulnerable to CRLF injection in request headers
  • ProxyAgent vulnerable to MITM

proxy.golang.org: github.com/nodejs/undici

• Homepage:
• Documentation: https://pkg.go.dev/github.com/nodejs/undici#section-documentation
• Licenses: mit
• Latest release: v8.4.1+incompatible (published 5 days ago)
• Last Synced: 2026-06-11T23:24:01.380Z (2 days ago)
• Versions: 273
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent packages count: 6.497%
  • Average: 6.716%
  • Dependent repos count: 6.936%

npmjs.org: undici-types

A stand-alone types package for Undici

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 8.4.1 (published 5 days ago)
• Last Synced: 2026-06-11T23:24:06.932Z (2 days ago)
• Versions: 120
• Dependent Packages: 10
• Dependent Repositories: 0
• Downloads: 1,051,237,131 Last month
• Docker Downloads: 2,951,355,932
• Rankings:
  • Downloads: 0.014%
  • Stargazers count: 1.301%
  • Forks count: 1.723%
  • Docker downloads count: 1.938%
  • Dependent packages count: 2.002%
  • Average: 6.739%
  • Dependent repos count: 33.458%
• Maintainers (2)
  • matteo.collina
  • ethan_arrowood

repo1.maven.org: org.webjars.npm:undici

WebJar for undici

• Homepage: https://www.webjars.org
• Documentation: https://appdoc.app/artifact/org.webjars.npm/undici/
• Licenses: MIT
• Latest release: 7.16.0 (published 6 months ago)
• Last Synced: 2026-06-11T23:23:56.685Z (2 days ago)
• Versions: 17
• Dependent Packages: 4
• Dependent Repositories: 1
• Rankings:
  • Stargazers count: 4.461%
  • Forks count: 10.52%
  • Average: 13.241%
  • Dependent packages count: 17.328%
  • Dependent repos count: 20.657%

npmjs.org: @olofd/undici

An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 5.13.0 (published over 3 years ago)
• Last Synced: 2026-06-11T23:24:03.752Z (2 days ago)
• Versions: 1
• Dependent Packages: 1
• Dependent Repositories: 0
• Downloads: 10 Last month
• Rankings:
  • Stargazers count: 1.769%
  • Forks count: 2.453%
  • Dependent packages count: 16.22%
  • Average: 18.805%
  • Dependent repos count: 25.306%
  • Downloads: 48.278%
• Maintainers (1)
  • olofd

npmjs.org: @juzi/undici

An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 5.25.5-beta.2 (published over 2 years ago)
• Last Synced: 2026-06-11T23:24:06.354Z (2 days ago)
• Versions: 3
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 51 Last month
• Rankings:
  • Stargazers count: 1.381%
  • Forks count: 1.915%
  • Average: 23.29%
  • Dependent repos count: 37.225%
  • Dependent packages count: 52.639%
• Maintainers (2)
  • binsee
  • juzi-admin

npmjs.org: @depup/undici

An HTTP/1.1 client, written from scratch for Node.js (with updated dependencies)

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 8.0.3-depup.0 (published 2 months ago)
• Last Synced: 2026-06-11T23:24:03.754Z (2 days ago)
• Versions: 9
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 234 Last month
• Rankings:
  • Dependent repos count: 22.453%
  • Average: 27.425%
  • Dependent packages count: 32.397%
• Maintainers (1)
  • chiefmikey

npmjs.org: @builder.io/undici

An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 7.18.3 (published 5 months ago)
• Last Synced: 2026-06-11T23:24:29.439Z (2 days ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 88 Last month
• Rankings:
  • Dependent repos count: 22.756%
  • Average: 27.779%
  • Dependent packages count: 32.802%
• Maintainers (22)
  • mhevery
  • steve8708
  • manucorporat
  • gustavohgs
  • sanyamkamat
  • samijaber
  • teleaziz123
  • mrkoreye
  • liamdebeasi
  • sidmohanty11
  • kylefowler
  • floating_dynamo
  • armela
  • paprikaf
  • builderio-bot
  • pabloelisseo
  • nicholaskoech
  • bengirone
  • aishwarya_parab
  • emmaac
  • vishwasgopinath
  • jcortesebuilder

npmjs.org: @builder.io/undici-types

A stand-alone types package for Undici

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 7.18.3 (published 5 months ago)
• Last Synced: 2026-06-11T23:24:29.163Z (2 days ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 74 Last month
• Rankings:
  • Dependent repos count: 22.756%
  • Average: 27.779%
  • Dependent packages count: 32.802%
• Maintainers (22)
  • mhevery
  • steve8708
  • manucorporat
  • gustavohgs
  • sanyamkamat
  • samijaber
  • teleaziz123
  • mrkoreye
  • liamdebeasi
  • sidmohanty11
  • kylefowler
  • floating_dynamo
  • armela
  • paprikaf
  • builderio-bot
  • pabloelisseo
  • nicholaskoech
  • bengirone
  • aishwarya_parab
  • emmaac
  • vishwasgopinath
  • jcortesebuilder

npmjs.org: @ru-hend/undici

Fork From Undici An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 0.0.1 (published 10 months ago)
• Last Synced: 2026-06-11T23:24:03.179Z (2 days ago)
• Versions: 1
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 1,552 Last month
• Rankings:
  • Dependent repos count: 24.072%
  • Average: 29.402%
  • Dependent packages count: 34.733%
• Maintainers (1)
  • rulihenderson

npmjs.org: undici-jey

An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 6.21.6 (published over 1 year ago)
• Last Synced: 2026-06-11T23:24:03.758Z (2 days ago)
• Versions: 6
• Dependent Packages: 0
• Dependent Repositories: 0
• Downloads: 42 Last month
• Rankings:
  • Dependent repos count: 25.196%
  • Average: 30.822%
  • Dependent packages count: 36.448%
• Maintainers (1)
  • jrjs

npmjs.org: @nxtedition/undici

An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Licenses: MIT
• Latest release: 11.1.9 (published 6 days ago)
• Last Synced: 2026-06-11T23:24:27.413Z (2 days ago)
• Versions: 31
• Dependent Packages: 1
• Dependent Repositories: 0
• Downloads: 1,607 Last month
• Rankings:
  • Dependent repos count: 25.328%
  • Dependent packages count: 32.894%
  • Average: 35.505%
  • Downloads: 48.293%
• Maintainers (12)
  • deadbeef84
  • tobiasandersen
  • ronag
  • nxtadmin
  • niklaspandersson
  • dwyfl
  • gnz
  • phillipjacob
  • qtoden
  • gulpf
  • olzzon
  • haasn

repo1.maven.org: org.webjars.npm:undici-types

WebJar for undici-types

• Homepage: https://www.webjars.org
• Documentation: https://appdoc.app/artifact/org.webjars.npm/undici-types/
• Licenses: MIT
• Latest release: 7.18.2 (published 3 months ago)
• Last Synced: 2026-06-11T23:23:56.423Z (2 days ago)
• Versions: 12
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent repos count: 31.026%
  • Average: 37.691%
  • Dependent packages count: 44.356%

repo1.maven.org: org.mvnpm:undici

An HTTP/1.1 client, written from scratch for Node.js

• Homepage: https://undici.nodejs.org
• Documentation: https://appdoc.app/artifact/org.mvnpm/undici/
• Licenses: MIT
• Latest release: 8.3.0 (published 29 days ago)
• Last Synced: 2026-06-11T23:23:55.744Z (2 days ago)
• Versions: 44
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent repos count: 33.537%
  • Average: 40.741%
  • Dependent packages count: 47.945%

repo1.maven.org: org.mvnpm:undici-types

A stand-alone types package for Undici

• Homepage: https://undici.nodejs.org
• Documentation: https://appdoc.app/artifact/org.mvnpm/undici-types/
• Licenses: MIT
• Latest release: 8.3.0 (published 30 days ago)
• Last Synced: 2026-06-11T23:23:55.834Z (2 days ago)
• Versions: 40
• Dependent Packages: 0
• Dependent Repositories: 0
• Rankings:
  • Dependent repos count: 34.784%
  • Average: 42.259%
  • Dependent packages count: 49.734%