Is node-fetch safe? npm package security report

cyberxyz.io/packages/npm/node-fetch

npm packagelast checked 2026-07-17

node-fetch · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 20 graph-tracked dependencies · provenance: unknown

SIGNALS

Advisory HistoryclearOK

5 historical advisory record(s) on this package (max severity HIGH). Add a version to check whether it is affected.

DEPENDENCIES

abort-controller@^1.0.2clean

abortcontroller-polyfill@^1.1.9clean

@babel/cli@^7.8.4clean

@babel/core@^7.8.7clean

babel-core@^6.26.0clean

babel-plugin-add-module-exports@^1.0.2clean

babel-plugin-istanbul@^3.0.0clean

babel-plugin-transform-async-generator-functions@^6.24.1clean

babel-plugin-transform-runtime@^6.15.0clean

babel-polyfill@^6.26.0clean

@babel/preset-env@^7.8.7clean

babel-preset-env@^1.1.10clean

babel-preset-es2015@^6.16.0clean

@babel/register@^7.8.6clean

babel-register@^6.16.3clean

babel-runtime@^6.11.6clean

bluebird@^2.9.1clean

buffer-to-arraybuffer@0.0.4clean

busboy@^0.3.1clean

c8@^7.1.2clean

PACKAGE node-fetchECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages