npm package report

Is undici safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/undici
npm packagelast checked 2026-07-17

undici · verdict ALLOW · no known risk

0.6/10
XYZ SCORE
SUMMARY

Verdict ALLOW · 19 graph-tracked dependencies · 1 flagged · provenance: unknown

Re-check live →

SIGNALS
Advisory HistoryclearOK

35 historical advisory record(s) on this package (max severity HIGH). Add a version to check whether it is affected.

Commit-Level AnalysisclearOK

14 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES
abort-controller@^3.0.0clean
atomic-sleep@^1.0.0clean
axios@^1.6.5block
benchmark@^2.1.4clean
borp@^0.10.0clean
busboy@^0.3.1clean
c8@^10.0.0clean
chai@^4.3.4clean
chai-as-promised@^7.1.1clean
chai-iterator@^3.0.2clean
chai-string@^1.5.0clean
concurrently@^5.2.0clean
cronometro@^0.8.0clean
cross-env@^7.0.3clean
delay@^5.0.0clean
dns-packet@^5.4.0clean
docsify-cli@^4.4.2clean
end-of-stream@^1.4.1clean
esbuild@^0.14.14clean
PACKAGE undiciECOSYSTEM npmDECISION ALLOW

Baked snapshot · run a live check for the current verdict · browse all packages