Security News
Research
Supply Chain Attack on Rspack npm Packages Injects Cryptojacking Malware
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
@devtea2027/accusantium-voluptas-rem-iste
Advanced tools
An HTTP/1.1 client, written from scratch for Node.js.
Undici means eleven in Italian. 1.1 -> 11 -> Eleven -> Undici. It is also a Stranger Things reference.
Have a question about using Undici? Open a Q&A Discussion or join our official OpenJS Slack channel.
Looking to contribute? Start by reading the contributing guide
npm i @devtea2027/accusantium-voluptas-rem-iste
The benchmark is a simple getting data example using a 50 TCP connections with a pipelining depth of 10 running on Node 20.10.0.
Tests | Samples | Result | Tolerance | Difference with slowest |
---|---|---|---|---|
@devtea2027/accusantium-voluptas-rem-iste - fetch | 30 | 3704.43 req/sec | ± 2.95 % | - |
http - no keepalive | 20 | 4275.30 req/sec | ± 2.60 % | + 15.41 % |
node-fetch | 10 | 4759.42 req/sec | ± 0.87 % | + 28.48 % |
request | 40 | 4803.37 req/sec | ± 2.77 % | + 29.67 % |
axios | 45 | 4951.97 req/sec | ± 2.88 % | + 33.68 % |
got | 10 | 5969.67 req/sec | ± 2.64 % | + 61.15 % |
superagent | 10 | 9471.48 req/sec | ± 1.50 % | + 155.68 % |
http - keepalive | 25 | 10327.49 req/sec | ± 2.95 % | + 178.79 % |
@devtea2027/accusantium-voluptas-rem-iste - pipeline | 10 | 15053.41 req/sec | ± 1.63 % | + 306.36 % |
@devtea2027/accusantium-voluptas-rem-iste - request | 10 | 19264.24 req/sec | ± 1.74 % | + 420.03 % |
@devtea2027/accusantium-voluptas-rem-iste - stream | 15 | 20317.29 req/sec | ± 2.13 % | + 448.46 % |
@devtea2027/accusantium-voluptas-rem-iste - dispatch | 10 | 24883.28 req/sec | ± 1.54 % | + 571.72 % |
The benchmark is a simple sending data example using a 50 TCP connections with a pipelining depth of 10 running on Node 20.10.0.
Tests | Samples | Result | Tolerance | Difference with slowest |
---|---|---|---|---|
@devtea2027/accusantium-voluptas-rem-iste - fetch | 20 | 1968.42 req/sec | ± 2.63 % | - |
http - no keepalive | 25 | 2330.30 req/sec | ± 2.99 % | + 18.38 % |
node-fetch | 20 | 2485.36 req/sec | ± 2.70 % | + 26.26 % |
got | 15 | 2787.68 req/sec | ± 2.56 % | + 41.62 % |
request | 30 | 2805.10 req/sec | ± 2.59 % | + 42.50 % |
axios | 10 | 3040.45 req/sec | ± 1.72 % | + 54.46 % |
superagent | 20 | 3358.29 req/sec | ± 2.51 % | + 70.61 % |
http - keepalive | 20 | 3477.94 req/sec | ± 2.51 % | + 76.69 % |
@devtea2027/accusantium-voluptas-rem-iste - pipeline | 25 | 3812.61 req/sec | ± 2.80 % | + 93.69 % |
@devtea2027/accusantium-voluptas-rem-iste - request | 10 | 6067.00 req/sec | ± 0.94 % | + 208.22 % |
@devtea2027/accusantium-voluptas-rem-iste - stream | 10 | 6391.61 req/sec | ± 1.98 % | + 224.71 % |
@devtea2027/accusantium-voluptas-rem-iste - dispatch | 10 | 6397.00 req/sec | ± 1.48 % | + 224.98 % |
import { request } from '@devtea2027/accusantium-voluptas-rem-iste'
const {
statusCode,
headers,
trailers,
body
} = await request('http://localhost:3000/foo')
console.log('response received', statusCode)
console.log('headers', headers)
for await (const data of body) { console.log('data', data) }
console.log('trailers', trailers)
The body
mixins are the most common way to format the request/response body. Mixins include:
[!NOTE] The body returned from
@devtea2027/accusantium-voluptas-rem-iste.request
does not implement.formData()
.
Example usage:
import { request } from '@devtea2027/accusantium-voluptas-rem-iste'
const {
statusCode,
headers,
trailers,
body
} = await request('http://localhost:3000/foo')
console.log('response received', statusCode)
console.log('headers', headers)
console.log('data', await body.json())
console.log('trailers', trailers)
Note: Once a mixin has been called then the body cannot be reused, thus calling additional mixins on .body
, e.g. .body.json(); .body.text()
will result in an error TypeError: unusable
being thrown and returned through the Promise
rejection.
Should you need to access the body
in plain-text after using a mixin, the best practice is to use the .text()
mixin first and then manually parse the text to the desired format.
For more information about their behavior, please reference the body mixin from the Fetch Standard.
This section documents our most commonly used API methods. Additional APIs are documented in their own files within the docs folder and are accessible via the navigation list on the left side of the docs site.
@devtea2027/accusantium-voluptas-rem-iste.request([url, options]): Promise
Arguments:
string | URL | UrlObject
RequestOptions
Dispatcher
- Default: getGlobalDispatcherString
- Default: PUT
if options.body
, otherwise GET
Integer
- Default: 0
Returns a promise with the result of the Dispatcher.request
method.
Calls options.dispatcher.request(options)
.
See Dispatcher.request for more details, and request examples for examples.
@devtea2027/accusantium-voluptas-rem-iste.stream([url, options, ]factory): Promise
Arguments:
string | URL | UrlObject
StreamOptions
Dispatcher
- Default: getGlobalDispatcherString
- Default: PUT
if options.body
, otherwise GET
Integer
- Default: 0
Dispatcher.stream.factory
Returns a promise with the result of the Dispatcher.stream
method.
Calls options.dispatcher.stream(options, factory)
.
See Dispatcher.stream for more details.
@devtea2027/accusantium-voluptas-rem-iste.pipeline([url, options, ]handler): Duplex
Arguments:
string | URL | UrlObject
PipelineOptions
Dispatcher
- Default: getGlobalDispatcherString
- Default: PUT
if options.body
, otherwise GET
Integer
- Default: 0
Dispatcher.pipeline.handler
Returns: stream.Duplex
Calls options.dispatch.pipeline(options, handler)
.
See Dispatcher.pipeline for more details.
@devtea2027/accusantium-voluptas-rem-iste.connect([url, options]): Promise
Starts two-way communications with the requested resource using HTTP CONNECT.
Arguments:
string | URL | UrlObject
ConnectOptions
Dispatcher
- Default: getGlobalDispatcherInteger
- Default: 0
(err: Error | null, data: ConnectData | null) => void
(optional)Returns a promise with the result of the Dispatcher.connect
method.
Calls options.dispatch.connect(options)
.
See Dispatcher.connect for more details.
@devtea2027/accusantium-voluptas-rem-iste.fetch(input[, init]): Promise
Implements fetch.
Basic usage example:
import { fetch } from '@devtea2027/accusantium-voluptas-rem-iste'
const res = await fetch('https://example.com')
const json = await res.json()
console.log(json)
You can pass an optional dispatcher to fetch
as:
import { fetch, Agent } from '@devtea2027/accusantium-voluptas-rem-iste'
const res = await fetch('https://example.com', {
// Mocks are also supported
dispatcher: new Agent({
keepAliveTimeout: 10,
keepAliveMaxTimeout: 10
})
})
const json = await res.json()
console.log(json)
request.body
A body can be of the following types:
In this implementation of fetch, request.body
now accepts Async Iterables
. It is not present in the Fetch Standard.
import { fetch } from '@devtea2027/accusantium-voluptas-rem-iste'
const data = {
async *[Symbol.asyncIterator]() {
yield 'hello'
yield 'world'
},
}
await fetch('https://example.com', { body: data, method: 'POST', duplex: 'half' })
FormData besides text data and buffers can also utilize streams via Blob objects:
import { openAsBlob } from 'node:fs'
const file = await openAsBlob('./big.csv')
const body = new FormData()
body.set('file', file, 'big.csv')
await fetch('http://example.com', { method: 'POST', body })
request.duplex
In this implementation of fetch, request.duplex
must be set if request.body
is ReadableStream
or Async Iterables
, however, fetch requests are currently always full duplex. For more detail refer to the Fetch Standard..
response.body
Nodejs has two kinds of streams: web streams, which follow the API of the WHATWG web standard found in browsers, and an older Node-specific streams API. response.body
returns a readable web stream. If you would prefer to work with a Node stream you can convert a web stream using .fromWeb()
.
import { fetch } from '@devtea2027/accusantium-voluptas-rem-iste'
import { Readable } from 'node:stream'
const response = await fetch('https://example.com')
const readableWebStream = response.body
const readableNodeStream = Readable.fromWeb(readableWebStream)
This section documents parts of the Fetch Standard that Undici does not support or does not fully implement.
The Fetch Standard allows users to skip consuming the response body by relying on garbage collection to release connection resources. Undici does not do the same. Therefore, it is important to always either consume or cancel the response body.
Garbage collection in Node is less aggressive and deterministic (due to the lack of clear idle periods that browsers have through the rendering refresh rate) which means that leaving the release of connection resources to the garbage collector can lead to excessive connection usage, reduced performance (due to less connection re-use), and even stalls or deadlocks when running out of connections.
// Do
const headers = await fetch(url)
.then(async res => {
for await (const chunk of res.body) {
// force consumption of body
}
return res.headers
})
// Do not
const headers = await fetch(url)
.then(res => res.headers)
However, if you want to get only headers, it might be better to use HEAD
request method. Usage of this method will obviate the need for consumption or cancelling of the response body. See MDN - HTTP - HTTP request methods - HEAD for more details.
const headers = await fetch(url, { method: 'HEAD' })
.then(res => res.headers)
The Fetch Standard requires implementations to exclude certain headers from requests and responses. In browser environments, some headers are forbidden so the user agent remains in full control over them. In Undici, these constraints are removed to give more control to the user.
@devtea2027/accusantium-voluptas-rem-iste.upgrade([url, options]): Promise
Upgrade to a different protocol. See MDN - HTTP - Protocol upgrade mechanism for more details.
Arguments:
string | URL | UrlObject
UpgradeOptions
Dispatcher
- Default: getGlobalDispatcherInteger
- Default: 0
(error: Error | null, data: UpgradeData) => void
(optional)Returns a promise with the result of the Dispatcher.upgrade
method.
Calls options.dispatcher.upgrade(options)
.
See Dispatcher.upgrade for more details.
@devtea2027/accusantium-voluptas-rem-iste.setGlobalDispatcher(dispatcher)
Dispatcher
Sets the global dispatcher used by Common API Methods.
@devtea2027/accusantium-voluptas-rem-iste.getGlobalDispatcher()
Gets the global dispatcher used by Common API Methods.
Returns: Dispatcher
@devtea2027/accusantium-voluptas-rem-iste.setGlobalOrigin(origin)
string | URL | undefined
Sets the global origin used in fetch
.
If undefined
is passed, the global origin will be reset. This will cause Response.redirect
, new Request()
, and fetch
to throw an error when a relative path is passed.
setGlobalOrigin('http://localhost:3000')
const response = await fetch('/api/ping')
console.log(response.url) // http://localhost:3000/api/ping
@devtea2027/accusantium-voluptas-rem-iste.getGlobalOrigin()
Gets the global origin used in fetch
.
Returns: URL
UrlObject
string | number
(optional)string
(optional)string
(optional)string
(optional)string
(optional)string
(optional)string
(optional)This section documents parts of the HTTP/1.1 specification that Undici does not support or does not fully implement.
Undici does not support the Expect
request header field. The request
body is always immediately sent and the 100 Continue
response will be
ignored.
Refs: https://tools.ietf.org/html/rfc7231#section-5.1.1
Undici will only use pipelining if configured with a pipelining
factor
greater than 1
.
Undici always assumes that connections are persistent and will immediately pipeline requests, without checking whether the connection is persistent. Hence, automatic fallback to HTTP/1.0 or HTTP/1.1 without pipelining is not supported.
Undici will immediately pipeline when retrying requests after a failed connection. However, Undici will not retry the first remaining requests in the prior pipeline and instead error the corresponding callback/promise/stream.
Undici will abort all running requests in the pipeline when any of them are aborted.
Since it is not possible to manually follow an HTTP redirect on the server-side,
Undici returns the actual response instead of an opaqueredirect
filtered one
when invoked with a manual
redirect. This aligns fetch()
with the other
implementations in Deno and Cloudflare Workers.
Refs: https://fetch.spec.whatwg.org/#atomic-http-redirect-handling
If you experience problem when connecting to a remote server that is resolved by your DNS servers to a IPv6 (AAAA record)
first, there are chances that your local router or ISP might have problem connecting to IPv6 networks. In that case
@devtea2027/accusantium-voluptas-rem-iste will throw an error with code UND_ERR_CONNECT_TIMEOUT
.
If the target server resolves to both a IPv6 and IPv4 (A records) address and you are using a compatible Node version
(18.3.0 and above), you can fix the problem by providing the autoSelectFamily
option (support by both @devtea2027/accusantium-voluptas-rem-iste.request
and @devtea2027/accusantium-voluptas-rem-iste.Agent
) which will enable the family autoselection algorithm when establishing the connection.
MIT
FAQs
security holding package
The npm package @devtea2027/accusantium-voluptas-rem-iste receives a total of 0 weekly downloads. As such, @devtea2027/accusantium-voluptas-rem-iste popularity was classified as not popular.
We found that @devtea2027/accusantium-voluptas-rem-iste demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.