npmpackage.info

Gathering detailed insights and metrics for make-fetch-happen

Other packages similar to make-fetch-happen

@types/make-fetch-happen

10.0.4

TypeScript definitions for make-fetch-happen

@ember-data/request

5.3.9

⚡️ A simple, small and fast framework-agnostic library to make `fetch` happen

@ember-data-mirror/request

5.3.9

⚡️ A simple, small and fast framework-agnostic library to make `fetch` happen

@apollo/utils.fetcher

3.1.0

Minimal web-style fetch TypeScript typings

Gathering detailed insights and metrics for make-fetch-happen

make-fetch-happen

making fetch happen for npm

14.0.3

191

NOASSERTION

JavaScript

2,584,659,735 6.9

Installations

npm install make-fetch-happen

Pull Requests

Open

1

Total

283

Closed

114

Merged

168

Issues

Open

9

Total

42

Closed

33

Releases

v14.0.3

Published on 23 Oct 2024

v14.0.2

Published on 16 Oct 2024

v14.0.1

Published on 02 Oct 2024

v14.0.0

Published on 26 Sept 2024

v13.0.1

Published on 30 Apr 2024

v13.0.0

Published on 15 Aug 2023

View all 31 releases

Developer

npm

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

^18.17.0 || >=20.5.0

Typescript Support

No

Node Version

22.10.0

NPM Version

10.9.0 Statistics

191 Stars

501 Commits

35 Forks

12 Watching

19 Branches

100 Contributors

Updated on 20 Nov 2024

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

2,584,659,735

Last day

4,004,278

Compared to previous day

Last week

6.5%

21,172,686

Compared to previous week

Last month

13.2%

85,259,060

Compared to previous month

Last year

32.7%

932,132,873

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@npmcli/agent cacache http-cache-semantics minipass minipass-fetch minipass-flush minipass-pipeline negotiator proc-log promise-retry ssri

Dev Dependencies

@npmcli/eslint-config @npmcli/template-oss nock safe-buffer standard-version tap

Versions

make-fetch-happen

make-fetch-happen is a Node.js library that wraps minipass-fetch with additional features minipass-fetch doesn't intend to include, including HTTP Cache support, request pooling, proxies, retries, and more!

Install

$ npm install --save make-fetch-happen

Example
Features
Contributing
API
Message From Our Sponsors

Example

1const fetch = require('make-fetch-happen').defaults({
2  cachePath: './my-cache' // path where cache will be written (and read)
3})
4
5fetch('https://registry.npmjs.org/make-fetch-happen').then(res => {
6  return res.json() // download the body as JSON
7}).then(body => {
8  console.log(`got ${body.name} from web`)
9  return fetch('https://registry.npmjs.org/make-fetch-happen', {
10    cache: 'no-cache' // forces a conditional request
11  })
12}).then(res => {
13  console.log(res.status) // 304! cache validated!
14  return res.json().then(body => {
15    console.log(`got ${body.name} from cache`)
16  })
17})

Features

Builds around minipass-fetch for the core fetch API implementation
Request pooling out of the box
Quite fast, really
Automatic HTTP-semantics-aware request retries
Cache-fallback automatic "offline mode"
Built-in request caching following full HTTP caching rules (Cache-Control, ETag, 304s, cache fallback on error, etc).
Node.js Stream support
Transparent gzip and deflate support
Subresource Integrity support
Proxy support (http, https, socks, socks4, socks5. via @npmcli/agent)
DNS cache (via (@npmcli/agent)

`> fetch(uriOrRequest, [opts]) -> Promise<Response>`

This function implements most of the fetch API: given a uri string or a Request instance, it will fire off an http request and return a Promise containing the relevant response.

If opts is provided, the minipass-fetch-specific options will be passed to that library. There are also additional options specific to make-fetch-happen that add various features, such as HTTP caching, integrity verification, proxy support, and more.

Example

1fetch('https://google.com').then(res => res.buffer())

`> fetch.defaults([defaultUrl], [defaultOpts])`

Returns a new fetch function that will call make-fetch-happen using defaultUrl and defaultOpts as default values to any calls.

A defaulted fetch will also have a .defaults() method, so they can be chained.

Example

1const fetch = require('make-fetch-happen').defaults({
2  cachePath: './my-local-cache'
3})
4
5fetch('https://registry.npmjs.org/make-fetch-happen') // will always use the cache

`> minipass-fetch options`

The following options for minipass-fetch are used as-is:

method
body
redirect
follow
timeout
compress
size

These other options are modified or augmented by make-fetch-happen:

headers - Default User-Agent set to make-fetch happen. Connection is set to keep-alive or close automatically depending on opts.agent.

For more details, see the documentation for minipass-fetch itself.

`> make-fetch-happen options`

make-fetch-happen augments the minipass-fetch API with additional features available through extra options. The following extra options are available:

opts.cachePath - Cache target to read/write
opts.cache - fetch cache mode. Controls cache behavior.
opts.cacheAdditionalHeaders - Store additional headers in the cache
opts.proxy - Proxy agent
opts.noProxy - Domain segments to disable proxying for.
opts.ca, opts.cert, opts.key, opts.strictSSL
opts.localAddress
opts.maxSockets
opts.retry - Request retry settings
opts.onRetry - a function called whenever a retry is attempted
opts.integrity - Subresource Integrity metadata.
opts.dns - DNS cache options
opts.agent - http/https/proxy/socks agent options. See @npmcli/agent for more info.

`> opts.cachePath`

A string Path to be used as the cache root for cacache.

NOTE: Requests will not be cached unless their response bodies are consumed. You will need to use one of the res.json(), res.buffer(), etc methods on the response, or drain the res.body stream, in order for it to be written.

The default cache manager also adds the following headers to cached responses:

X-Local-Cache: Path to the cache the content was found in
X-Local-Cache-Key: Unique cache entry key for this response
X-Local-Cache-Mode: Always stream to indicate how the response was read from cacache
X-Local-Cache-Hash: Specific integrity hash for the cached entry
X-Local-Cache-Status: One of miss, hit, stale, revalidated, updated, or skip to signal how the response was created
X-Local-Cache-Time: UTCString of the cache insertion time for the entry

Using cacache, a call like this may be used to manually fetch the cached entry:

1const h = response.headers
2cacache.get(h.get('x-local-cache'), h.get('x-local-cache-key'))
3
4// grab content only, directly:
5cacache.get.byDigest(h.get('x-local-cache'), h.get('x-local-cache-hash'))

Example

1fetch('https://registry.npmjs.org/make-fetch-happen', {
2  cachePath: './my-local-cache'
3}) // -> 200-level response will be written to disk

`> opts.cache`

This option follows the standard fetch API cache option. This option will do nothing if opts.cachePath is null. The following values are accepted (as strings):

default - Fetch will inspect the HTTP cache on the way to the network. If there is a fresh response it will be used. If there is a stale response a conditional request will be created, and a normal request otherwise. It then updates the HTTP cache with the response. If the revalidation request fails (for example, on a 500 or if you're offline), the stale response will be returned.
no-store - Fetch behaves as if there is no HTTP cache at all.
reload - Fetch behaves as if there is no HTTP cache on the way to the network. Ergo, it creates a normal request and updates the HTTP cache with the response.
no-cache - Fetch creates a conditional request if there is a response in the HTTP cache and a normal request otherwise. It then updates the HTTP cache with the response.
force-cache - Fetch uses any response in the HTTP cache matching the request, not paying attention to staleness. If there was no response, it creates a normal request and updates the HTTP cache with the response.
only-if-cached - Fetch uses any response in the HTTP cache matching the request, not paying attention to staleness. If there was no response, it returns a network error. (Can only be used when request’s mode is "same-origin". Any cached redirects will be followed assuming request’s redirect mode is "follow" and the redirects do not violate request’s mode.)

(Note: option descriptions are taken from https://fetch.spec.whatwg.org/#http-network-or-cache-fetch)

Example

1const fetch = require('make-fetch-happen').defaults({
2  cachePath: './my-cache'
3})
4
5// Will error with ENOTCACHED if we haven't already cached this url
6fetch('https://registry.npmjs.org/make-fetch-happen', {
7  cache: 'only-if-cached'
8})
9
10// Will refresh any local content and cache the new response
11fetch('https://registry.npmjs.org/make-fetch-happen', {
12  cache: 'reload'
13})
14
15// Will use any local data, even if stale. Otherwise, will hit network.
16fetch('https://registry.npmjs.org/make-fetch-happen', {
17  cache: 'force-cache'
18})

`> opts.cacheAdditionalHeaders`

The following headers are always stored in the cache when present:

cache-control
content-encoding
content-language
content-type
date
etag
expires
last-modified
link
location
pragma
vary

This option allows a user to store additional custom headers in the cache.

Example

1fetch('https://registry.npmjs.org/make-fetch-happen', {
2  cacheAdditionalHeaders: ['my-custom-header'],
3})

`> opts.proxy`

A string or new url.URL()-d URI to proxy through. Different Proxy handlers will be used depending on the proxy's protocol.

Additionally, process.env.HTTP_PROXY, process.env.HTTPS_PROXY, and process.env.PROXY are used if present and no opts.proxy value is provided.

(Pending) process.env.NO_PROXY may also be configured to skip proxying requests for all, or specific domains.

Example

1fetch('https://registry.npmjs.org/make-fetch-happen', {
2  proxy: 'https://corporate.yourcompany.proxy:4445'
3})
4
5fetch('https://registry.npmjs.org/make-fetch-happen', {
6  proxy: {
7    protocol: 'https:',
8    hostname: 'corporate.yourcompany.proxy',
9    port: 4445
10  }
11})

`> opts.noProxy`

If present, should be a comma-separated string or an array of domain extensions that a proxy should not be used for.

This option may also be provided through process.env.NO_PROXY.

`> opts.ca, opts.cert, opts.key, opts.strictSSL`

These values are passed in directly to the HTTPS agent and will be used for both proxied and unproxied outgoing HTTPS requests. They mostly correspond to the same options the https module accepts, which will be themselves passed to tls.connect(). opts.strictSSL corresponds to rejectUnauthorized.

`> opts.localAddress`

Passed directly to http and https request calls. Determines the local address to bind to.

`> opts.maxSockets`

Default: 15

Maximum number of active concurrent sockets to use for the underlying Http/Https/Proxy agents. This setting applies once per spawned agent.

15 is probably a pretty good value for most use-cases, and balances speed with, uh, not knocking out people's routers. 🤓

`> opts.retry`

An object that can be used to tune request retry settings. Retries will only be attempted on the following conditions:

Request method is NOT POST AND
Request status is one of: 408, 420, 429, or any status in the 500-range. OR
Request errored with ECONNRESET, ECONNREFUSED, EADDRINUSE, ETIMEDOUT, or the fetch error request-timeout.

The following are worth noting as explicitly not retried:

getaddrinfo ENOTFOUND and will be assumed to be either an unreachable domain or the user will be assumed offline. If a response is cached, it will be returned immediately.

If opts.retry is false, it is equivalent to {retries: 0}

If opts.retry is a number, it is equivalent to {retries: num}

The following retry options are available if you want more control over it:

retries
factor
minTimeout
maxTimeout
randomize

For details on what each of these do, refer to the retry documentation.

Example

1fetch('https://flaky.site.com', {
2  retry: {
3    retries: 10,
4    randomize: true
5  }
6})
7
8fetch('http://reliable.site.com', {
9  retry: false
10})
11
12fetch('http://one-more.site.com', {
13  retry: 3
14})

`> opts.onRetry`

A function called with the response or error which caused the retry whenever one is attempted.

Example

1fetch('https://flaky.site.com', {
2  onRetry(cause) {
3    console.log('we will retry because of', cause)
4  }
5})

`> opts.integrity`

Matches the response body against the given Subresource Integrity metadata. If verification fails, the request will fail with an EINTEGRITY error.

integrity may either be a string or an ssri Integrity-like.

Example

1fetch('https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-1.0.0.tgz', {
2  integrity: 'sha1-o47j7zAYnedYFn1dF/fR9OV3z8Q='
3}) // -> ok
4
5fetch('https://malicious-registry.org/make-fetch-happen/-/make-fetch-happen-1.0.0.tgz', {
6  integrity: 'sha1-o47j7zAYnedYFn1dF/fR9OV3z8Q='
7}) // Error: EINTEGRITY

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

License

Determines if the project has defined a license.

9

SAST

Determines if the project uses static code analysis.

8

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/audit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/audit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/post-dependabot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/post-dependabot.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/post-dependabot.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/pull-request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/pull-request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release-integration.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release-integration.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:303: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/make-fetch-happen/release.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:38
Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:58
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:42
Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39
Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:42
Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:52
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130
Info: 0 out of 26 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 12 third-party GitHubAction dependencies pinned
Info: 0 out of 8 npmCommand dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

Score

6.9

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to make-fetch-happen

Other packages similar to make-fetch-happen

make-fetch-happen

Installations

Pull Requests

1

283

114

168

Issues

9

42

33

Releases

Developer

npm

Developer Guide

CommonJS

^18.17.0 || >=20.5.0

No

22.10.0

10.9.0

Statistics

Languages

Total Downloads

2,584,659,735

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

make-fetch-happen

Install

Table of Contents

Example

Features

> fetch(uriOrRequest, [opts]) -> Promise<Response>

Example

> fetch.defaults([defaultUrl], [defaultOpts])

Example

> minipass-fetch options

> make-fetch-happen options

> opts.cachePath

Example

> opts.cache

Example

> opts.cacheAdditionalHeaders

Example

> opts.proxy

Example

> opts.noProxy

> opts.ca, opts.cert, opts.key, opts.strictSSL

> opts.localAddress

> opts.maxSockets

> opts.retry

Example

> opts.onRetry

Example

> opts.integrity

Example

10

10

10

10

10

9

9

8

0

0

0

0

6.9

/10

`> fetch(uriOrRequest, [opts]) -> Promise<Response>`

`> fetch.defaults([defaultUrl], [defaultOpts])`

`> minipass-fetch options`

`> make-fetch-happen options`

`> opts.cachePath`

`> opts.cache`

`> opts.cacheAdditionalHeaders`

`> opts.proxy`

`> opts.noProxy`

`> opts.ca, opts.cert, opts.key, opts.strictSSL`

`> opts.localAddress`

`> opts.maxSockets`

`> opts.retry`

`> opts.onRetry`

`> opts.integrity`