Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
chainfetch
Advanced tools
Super simple HTTP requests using node-fetch and a chainable interface
First off, you need to install the module! To do so,
npm i chainfetch node-fetch
# Or if you are using yarn
yarn add chainfetch node-fetch
And then you're ready to roll! Or...chain.
The following examples assume you are in the context of an async function. All return functions return a promise for you to use.
const fetch = require('chainfetch');
const res = await fetch.get('https://example.com').toText();
For posting data, you can do something similar to this
const fetch = require('chainfetch');
const res = await fetch.post('https://example.com').query({ isSimple: true }).query('isAmazing', true).send({ string: 'chainfetch is simple and amazing!' });
We got you covered! We have rich typings which should work in all cases (if not, feel free to submit an issue ❤️)
import chainfetch from 'chainfetch';
// Or
import { get } from 'chainfetch';
// Or
import * as chainfetch from 'chainfetch';
// Works
chainfetch.get();
// If you want to create your own custom class for custom handling
const myCustomClass = new chainfetch('HTTP METHOD', 'URL');
myCustomClass.get();
toJSON
, toText
and toBuffer
In chainfetch, there are 4 functions which can determine how the response should be parsed. You can access the body by using res.body
.
By default, we try to JSON.parse the body if the response provides the Content-Type
header and it includes application/json
.
Function | What it returns |
---|---|
toBuffer | Does no processing on the body, and returns it as a buffer |
toJSON | Attempts to parse the response body as a JSON object, otherwise it returns the stringified Buffer |
toText and toString | Both of these functions take the response body and turn it into a string |
FAQs
A simple, chainable wrapper around node-fetch!
We found that chainfetch demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.