https://github.com/nodejs/undici
client http nodejs
Score: 37.71017331790234
Last synced: about 9 hours ago
JSON representation
Repository metadata:
An HTTP/1.1 client, written from scratch for Node.js
- Host: GitHub
- URL: https://github.com/nodejs/undici
- Owner: nodejs
- License: mit
- Created: 2018-05-11T22:07:48.000Z (over 8 years ago)
- Default Branch: main
- Last Pushed: 2026-08-23T00:03:55.000Z (4 days ago)
- Last Synced: 2026-08-23T05:47:12.854Z (4 days ago)
- Topics: client, http, nodejs
- Language: JavaScript
- Homepage: https://undici.nodejs.org/
- Size: 16 MB
- Stars: 7,677
- Watchers: 52
- Forks: 841
- Open Issues: 335
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
- Governance: GOVERNANCE.md
- Maintainers: MAINTAINERS.md
-
Funding:
- Github: nodejs
- Open collective: nodejs
Owner metadata:
- Name: Node.js
- Login: nodejs
- Email:
- Kind: organization
- Description:
- Website: https://nodejs.org
- Location:
- Twitter: nodejs
- Company:
- Icon url: https://avatars.githubusercontent.com/u/9950313?v=4
- Repositories: 218
- Last Synced at: 2024-10-30T02:43:16.937Z
- Profile URL: https://github.com/nodejs
GitHub Events
Total
- Commit comment event: 5
- Create event: 471
- Delete event: 360
- Discussion event: 1
- Fork event: 148
- Issue comment event: 1739
- Issues event: 416
- Pull request event: 1194
- Pull request review comment event: 667
- Pull request review event: 1462
- Push event: 1687
- Release event: 39
- Watch event: 998
- Total: 9187
Last Year
- Commit comment event: 1
- Create event: 207
- Delete event: 166
- Discussion event: 1
- Fork event: 28
- Issue comment event: 359
- Issues event: 106
- Pull request event: 360
- Pull request review comment event: 160
- Pull request review event: 365
- Push event: 634
- Release event: 8
- Watch event: 208
- Total: 2603
Committers metadata
Last synced: about 13 hours ago
Total Commits: 4,162
Total Committers: 402
Avg Commits per committer: 10.353
Development Distribution Score (DDS): 0.64
Commits in past year: 666
Committers in past year: 102
Avg Commits per committer in past year: 6.529
Development Distribution Score (DDS) in past year: 0.757
| Name | Commits | |
|---|---|---|
| Robert Nagy | r****y@i****m | 1500 |
| Matteo Collina | h****o@m****m | 412 |
| Khafra | m****3@g****m | 383 |
| Aras Abbasi | a****i@g****m | 311 |
| dependabot[bot] | 4****] | 288 |
| tsctx | 9****x | 108 |
| github-actions[bot] | 4****] | 99 |
| Trivikram Kamat | 1****r | 92 |
| Carlos Fuentes | m****e@m****v | 67 |
| Ethan Arrowood | e****d@g****m | 32 |
| Daniele Belardi | d****l@g****m | 23 |
| Rafael Gonzaga | r****u@h****m | 19 |
| Tomas Della Vedova | d****r | 17 |
| flakey5 | 7****5 | 12 |
| Yagiz Nizipli | y****z@n****m | 12 |
| Szymon Marczak | 3****k | 12 |
| Filip Skokan | p****p@g****m | 12 |
| Frazer Smith | f****v@o****m | 11 |
| Петушков А. | 9****o | 11 |
| SUZUKI Sosuke | s****i@d****m | 10 |
| Igor Savin | i****n@g****m | 10 |
| Dan Castillo | d****o@j****i | 9 |
| DeepView Autofix | 2****x | 9 |
| Paolo Insogna | p****o@c****t | 9 |
| Horie Issei | i****e@i****m | 9 |
| Ram | 7****p | 8 |
| Felix Ezama-Vaughan | e****s@g****m | 8 |
| Mathias Lundell | l****3 | 8 |
| Antoine du Hamel | d****5@g****m | 8 |
| Alex Anderson | 1****n | 8 |
| and 372 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 828
Total pull requests: 3,293
Average time to close issues: 3 months
Average time to close pull requests: 15 days
Total issue authors: 458
Total pull request authors: 335
Average comments per issue: 4.08
Average comments per pull request: 2.02
Merged pull request: 2,214
Bot issues: 20
Bot pull requests: 629
Past year issues: 103
Past year pull requests: 464
Past year average time to close issues: 15 days
Past year average time to close pull requests: 6 days
Past year issue authors: 71
Past year pull request authors: 100
Past year average comments per issue: 1.26
Past year average comments per pull request: 1.53
Past year merged pull request: 199
Past year bot issues: 5
Past year bot pull requests: 62
Top Issue Authors
- ronag (63)
- KhafraDev (43)
- Uzlopak (36)
- mcollina (28)
- github-actions[bot] (16)
- tsctx (12)
- jeswr (11)
- jimmywarting (10)
- Ethan-Arrowood (8)
- PandaWorker (8)
- metcoder95 (7)
- kettanaito (7)
- Osama261caryp (6)
- Stevenanthony21b (6)
- fancy45daddy (5)
Top Pull Request Authors
- Uzlopak (573)
- dependabot[bot] (457)
- ronag (304)
- KhafraDev (304)
- mcollina (238)
- tsctx (193)
- github-actions[bot] (172)
- metcoder95 (129)
- flakey5 (23)
- mweberxyz (20)
- luddd3 (19)
- sosukesuzuki (19)
- marko1olo (18)
- Ethan-Arrowood (15)
- FelixVaughan (14)
Top Issue Labels
- bug (450)
- enhancement (175)
- good first issue (45)
- fetch (31)
- Docs (21)
- Status: help-wanted (15)
- Types (10)
- websocket (9)
- H2 (6)
- question (6)
- Tests (6)
- missing minimal reproduction (5)
- interceptors (5)
- dependencies (4)
- javascript (2)
- spec (1)
- wpt (1)
- Performance (1)
- Status: in-progress (1)
- Status: wontfix (1)
- github_actions (1)
- type: bug (1)
- semver-major (1)
- usage help (1)
- status: superseded (1)
- docker (1)
- eventsource (1)
Top Pull Request Labels
- dependencies (458)
- github_actions (238)
- javascript (160)
- docker (58)
- semver-major (45)
- backport v6.x (39)
- enhancement (8)
- Status: help-wanted (5)
- tsc-agenda (3)
- wpt (2)
- Docs (2)
- interceptors (2)
- Status: blocked (2)
- fetch (2)
- backport v7.x (1)
- Client (1)
Package metadata
- Total packages: 14
-
Total downloads:
- npm: 1,829,950,880 last-month
- Total docker downloads: 5,572,016,013
- Total dependent packages: 1,971 (may contain duplicates)
- Total dependent repositories: 98,049 (may contain duplicates)
- Total versions: 876
- Total maintainers: 31
- Total advisories: 35
npmjs.org: undici
An HTTP/1.1 client, written from scratch for Node.js
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 8.10.0 (published 23 days ago)
- Last Synced: 2026-08-26T10:05:01.188Z (about 10 hours ago)
- Versions: 300
- Dependent Packages: 1,956
- Dependent Repositories: 98,048
- Downloads: 647,619,498 Last month
- Docker Downloads: 2,620,660,081
-
Rankings:
- Dependent packages count: 0.04%
- Docker downloads count: 0.046%
- Downloads: 0.047%
- Dependent repos count: 0.101%
- Average: 0.545%
- Stargazers count: 1.298%
- Forks count: 1.736%
- Maintainers (3)
-
Advisories:
- undici vulnerable to CRLF Injection via blob-like body 'type' property
- undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
- undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
- undici vulnerable to downstream response desynchronization via retry interceptor
- undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
- undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
- undici WebSocket client vulnerable to denial of service via fragment count bypass
- undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
- undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
- undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
- undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
- undici vulnerable to cross-user information disclosure via shared cache whitespace bypass
- undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
- Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
- Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation
- Undici has CRLF Injection in undici via `upgrade` option
- Undici has Unbounded Memory Consumption in its DeduplicationHandler via Response Buffering that leads to DoS
- Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client
- Undici has an HTTP Request/Response Smuggling issue
- Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
- undici Denial of Service attack via bad certificate data
- Use of Insufficiently Random Values in undici
- Undici vulnerable to data leak when using response.arrayBuffer()
- Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
- Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
- Undici proxy-authorization header not cleared on cross-origin redirect in fetch
- fetch(url) leads to a memory leak in undici
- Undici's cookie header not cleared on cross-origin redirect in fetch
- CRLF Injection in Nodejs ‘undici’ via host
- Regular Expression Denial of Service in Headers
- Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type
- `undici.request` vulnerable to SSRF using absolute URL on `pathname`
- undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
- undici before v5.8.0 vulnerable to CRLF injection in request headers
- ProxyAgent vulnerable to MITM
proxy.golang.org: github.com/nodejs/undici
- Homepage:
- Documentation: https://pkg.go.dev/github.com/nodejs/undici#section-documentation
- Licenses: mit
- Latest release: v8.10.0+incompatible (published 23 days ago)
- Last Synced: 2026-08-25T10:19:20.715Z (1 day ago)
- Versions: 283
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 6.497%
- Average: 6.716%
- Dependent repos count: 6.936%
npmjs.org: undici-types
A stand-alone types package for Undici
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 8.10.0 (published 23 days ago)
- Last Synced: 2026-08-25T10:44:48.947Z (1 day ago)
- Versions: 130
- Dependent Packages: 10
- Dependent Repositories: 0
- Downloads: 1,182,329,119 Last month
- Docker Downloads: 2,951,355,932
-
Rankings:
- Downloads: 0.014%
- Stargazers count: 1.301%
- Forks count: 1.723%
- Docker downloads count: 1.938%
- Dependent packages count: 2.002%
- Average: 6.739%
- Dependent repos count: 33.458%
- Maintainers (2)
repo1.maven.org: org.webjars.npm:undici
WebJar for undici
- Homepage: https://www.webjars.org
- Documentation: https://appdoc.app/artifact/org.webjars.npm/undici/
- Licenses: MIT
- Latest release: 7.27.1 (published 3 months ago)
- Last Synced: 2026-08-25T10:19:35.903Z (1 day ago)
- Versions: 18
- Dependent Packages: 4
- Dependent Repositories: 1
-
Rankings:
- Stargazers count: 4.461%
- Forks count: 10.52%
- Average: 13.241%
- Dependent packages count: 17.328%
- Dependent repos count: 20.657%
npmjs.org: @olofd/undici
An HTTP/1.1 client, written from scratch for Node.js
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 5.13.0 (published over 3 years ago)
- Last Synced: 2026-08-25T11:23:42.721Z (1 day ago)
- Versions: 1
- Dependent Packages: 1
- Dependent Repositories: 0
- Downloads: 11 Last month
-
Rankings:
- Stargazers count: 1.769%
- Forks count: 2.453%
- Dependent packages count: 16.22%
- Average: 18.805%
- Dependent repos count: 25.306%
- Downloads: 48.278%
- Maintainers (1)
npmjs.org: @juzi/undici
An HTTP/1.1 client, written from scratch for Node.js
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 5.25.5-beta.2 (published almost 3 years ago)
- Last Synced: 2026-08-24T11:52:33.998Z (2 days ago)
- Versions: 3
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 15 Last month
-
Rankings:
- Stargazers count: 1.381%
- Forks count: 1.915%
- Average: 23.29%
- Dependent repos count: 37.225%
- Dependent packages count: 52.639%
- Maintainers (2)
npmjs.org: @depup/undici
An HTTP/1.1 client, written from scratch for Node.js (with updated dependencies)
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 8.10.0-depup.0 (published 18 days ago)
- Last Synced: 2026-08-24T10:25:21.566Z (2 days ago)
- Versions: 12
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 618 Last month
-
Rankings:
- Dependent repos count: 22.453%
- Average: 27.425%
- Dependent packages count: 32.397%
- Maintainers (1)
npmjs.org: @builder.io/undici
An HTTP/1.1 client, written from scratch for Node.js
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 7.18.3 (published 7 months ago)
- Last Synced: 2026-08-25T10:44:03.627Z (1 day ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 10 Last month
-
Rankings:
- Dependent repos count: 22.756%
- Average: 27.779%
- Dependent packages count: 32.802%
- Maintainers (22)
npmjs.org: @builder.io/undici-types
A stand-alone types package for Undici
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 7.18.3 (published 7 months ago)
- Last Synced: 2026-08-24T15:53:28.014Z (2 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 13 Last month
-
Rankings:
- Dependent repos count: 22.756%
- Average: 27.779%
- Dependent packages count: 32.802%
- Maintainers (22)
npmjs.org: @ru-hend/undici
Fork From Undici An HTTP/1.1 client, written from scratch for Node.js
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 0.0.1 (published about 1 year ago)
- Last Synced: 2026-08-24T11:46:23.671Z (2 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 1,570 Last month
-
Rankings:
- Dependent repos count: 24.072%
- Average: 29.402%
- Dependent packages count: 34.733%
- Maintainers (1)
npmjs.org: undici-jey
An HTTP/1.1 client, written from scratch for Node.js
- Homepage: https://undici.nodejs.org
- Licenses: MIT
- Latest release: 6.21.6 (published over 1 year ago)
- Last Synced: 2026-08-24T11:41:03.786Z (2 days ago)
- Versions: 6
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 26 Last month
-
Rankings:
- Dependent repos count: 25.196%
- Average: 30.822%
- Dependent packages count: 36.448%
- Maintainers (1)
repo1.maven.org: org.webjars.npm:undici-types
WebJar for undici-types
- Homepage: https://www.webjars.org
- Documentation: https://appdoc.app/artifact/org.webjars.npm/undici-types/
- Licenses: MIT
- Latest release: 8.3.0 (published about 1 month ago)
- Last Synced: 2026-08-25T10:18:26.333Z (1 day ago)
- Versions: 14
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 31.026%
- Average: 37.691%
- Dependent packages count: 44.356%
repo1.maven.org: org.mvnpm:undici
An HTTP/1.1 client, written from scratch for Node.js
- Homepage: https://undici.nodejs.org
- Documentation: https://appdoc.app/artifact/org.mvnpm/undici/
- Licenses: MIT
- Latest release: 8.10.0 (published 22 days ago)
- Last Synced: 2026-08-25T10:18:33.175Z (1 day ago)
- Versions: 58
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 33.537%
- Average: 40.741%
- Dependent packages count: 47.945%
repo1.maven.org: org.mvnpm:undici-types
A stand-alone types package for Undici
- Homepage: https://undici.nodejs.org
- Documentation: https://appdoc.app/artifact/org.mvnpm/undici-types/
- Licenses: MIT
- Latest release: 8.10.0 (published 23 days ago)
- Last Synced: 2026-08-25T10:18:56.921Z (1 day ago)
- Versions: 48
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 34.784%
- Average: 42.259%
- Dependent packages count: 49.734%
Dependencies
.github/workflows/bench.yml
actions
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- actions/setup-node 64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c composite
.github/workflows/codeql.yml
actions
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- github/codeql-action/analyze 46ed16ded91731b2df79a2893d3aea8e9f03b5c4 composite
- github/codeql-action/autobuild 46ed16ded91731b2df79a2893d3aea8e9f03b5c4 composite
- github/codeql-action/init 46ed16ded91731b2df79a2893d3aea8e9f03b5c4 composite
- step-security/harden-runner 128a63446a954579617e875aaab7d2978154e969 composite
.github/workflows/nodejs.yml
actions
- fastify/github-action-merge-dependabot f4fba1d411acf25f03affabc4ac209291cb9d6da composite
.github/workflows/scorecard.yml
actions
- actions/checkout c85c95e3d7251135ab7dc9ce3241c5835cc595a9 composite
- actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
- github/codeql-action/upload-sarif 46ed16ded91731b2df79a2893d3aea8e9f03b5c4 composite
- ossf/scorecard-action 80e868c13c90f172d68d1f4501dee99e2479f7af composite
package.json
npm
- @sinonjs/fake-timers ^10.0.2 development
- @types/node ^18.0.3 development
- abort-controller ^3.0.0 development
- atomic-sleep ^1.0.0 development
- chai ^4.3.4 development
- chai-as-promised ^7.1.1 development
- chai-iterator ^3.0.2 development
- chai-string ^1.5.0 development
- concurrently ^8.0.1 development
- cronometro ^1.0.5 development
- delay ^5.0.0 development
- dns-packet ^5.4.0 development
- docsify-cli ^4.4.3 development
- form-data ^4.0.0 development
- formdata-node ^4.3.1 development
- https-pem ^3.0.0 development
- husky ^8.0.1 development
- import-fresh ^3.3.0 development
- jest ^29.0.2 development
- jsdom ^22.1.0 development
- jsfuzz ^1.0.15 development
- mocha ^10.0.0 development
- p-timeout ^3.2.0 development
- pre-commit ^1.2.2 development
- proxy ^1.0.2 development
- proxyquire ^2.1.3 development
- sinon ^15.0.0 development
- snazzy ^9.0.0 development
- standard ^17.0.0 development
- table ^6.8.0 development
- tap ^16.1.0 development
- tsd ^0.28.1 development
- typescript ^5.0.2 development
- wait-on ^7.0.1 development
- ws ^8.11.0 development
- busboy ^1.6.0
.github/workflows/update-submodules.yml
actions
- actions/checkout 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 composite
- peter-evans/create-pull-request 5f6978faf089d4d20b00c7766989d076bb2fc7f1 composite
.github/workflows/ci.yml
actions
- actions/checkout 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 composite
- actions/dependency-review-action a1d282b36b6f3519aa1f3fc636f609c47dddb294 composite
- actions/github-script 3a2844b7e9c422d3c10d287c895573f7108da1b3 composite
- actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
- fastify/github-action-merge-dependabot 73ec4cbb5e56df5591eae286972d5b2201ffe90f composite
- hendrikmuhs/ccache-action d62db5f07c26379fc4b4e0916f098a92573c3b03 composite
- step-security/harden-runner 9af89fc71515a100421586dfdb3dc9c984fbf411 composite
.github/workflows/release-create-pr.yml
actions
- actions/checkout 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 composite
- actions/github-script 3a2844b7e9c422d3c10d287c895573f7108da1b3 composite
- actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
.github/workflows/backport.yml
actions
- tibdex/backport 9565281eda0731b1d20c4025c43339fb0a23812e composite
.github/workflows/autobahn.yml
actions
- actions/checkout 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 composite
- actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
- docker://docker * composite
- crossbario/autobahn-testsuite latest docker
package-lock.json
npm
- 689 dependencies
test/fixtures/docker/dante/Dockerfile
docker
- alpine latest build
.github/workflows/triggered-autobahn.yml
actions
benchmarks/package.json
npm
- axios ^1.6.7
- concurrently ^10.0.3
- cronometro ^6.0.3
- got ^15.0.0
- mitata ^1.0.4
- node-fetch ^3.3.2
- request ^2.88.2
- superagent ^10.0.0
- tinybench ^6.0.1
- uWebSockets.js uNetworking/uWebSockets.js#v20.68.0
- wait-on ^9.0.1
.github/workflows/nodejs-nightly.yml
actions
- actions/github-script 3a2844b7e9c422d3c10d287c895573f7108da1b3 composite
.github/workflows/nodejs-shared.yml
actions
- actions/checkout 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 composite
- actions/github-script 3a2844b7e9c422d3c10d287c895573f7108da1b3 composite
- actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
- hendrikmuhs/ccache-action d62db5f07c26379fc4b4e0916f098a92573c3b03 composite
.github/workflows/release.yml
actions
- actions/checkout 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 composite
- actions/github-script 3a2844b7e9c422d3c10d287c895573f7108da1b3 composite
- actions/setup-node 820762786026740c76f36085b0efc47a31fe5020 composite
test/fixtures/docker/docker-compose.yml
docker
- alpine latest
- ealen/echo-server latest
- node 20-alpine
- serjs/go-socks5-proxy latest