
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
@rbxts/fetchu
Advanced tools
[📘Documentation] | [📁 Source Code]
fetchu is a lightweight module created to simplify Roblox's HttpService for faster and efficient requests. Our goal is to minimize all the work you do for one request in a single line of code.
Using a tool like fetchu can simplify all Http requests out of Roblox to a single line of code while fetchu handles all errors. Its as easy as doing this:
local import = require(game.ReplicatedStorage.roarn_modules.roarn_tools)
local fetchu = import("fetchu") -- or local fetchu = require(path/to/fetchu)
local response = fetchu.get("https://pokeapi.co/api/v2/pokemon?limit=1", {headers = {
["Authorization"] = "my token for authorization!"
}, nocache = true})
print(response)
--[[
Returns:
{"count":1118,"next":"https://pokeapi.co/api/v2/pokemon?offset=1&limit=1","previous":null,"name":"bulbasaur","url":"https://pokeapi.co/api/v2/pokemon/1/"}
--]]
with Roarn (recommended for Rojo users)
To install fetchu with Roarn you can simply do the following command:
roarn install fetchu
Learn more on how Roarn, a Roblox package manager helps your workspace.
with Roblox
If you are preferably using Roblox Studio to develop code you can also install our module through the Roblox marketplace.
with GitHub
You can also install our package from GitHub releases easily. We have ZIP files available for Rojo users although we would prefer you using Roarn for a more organized workspace.
Questions?
If you have any questions on how fetchu works, please reply on this post! I'll be answering all questions here.
If you have more concerns or need help with fetchu we have community servers!
FAQs
Simplifying requests out of Roblox making HttpService easier.
The npm package @rbxts/fetchu receives a total of 0 weekly downloads. As such, @rbxts/fetchu popularity was classified as not popular.
We found that @rbxts/fetchu demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.