
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
const {HTTP} = require('http-call')
const {body: user} = await HTTP.get('https://api.github.com/users/me')
// do something with user
// automatically converts from json
// for typescript specify the type of the body with a generic:
const {body: user} = await HTTP.get<{id: string, email: string}>('https://api.github.com/users/me')
// set headers
await HTTP.get('https://api.github.com', {headers: {authorization: 'bearer auth'}})
Axios is a popular promise-based HTTP client for the browser and Node.js. It provides a rich set of features including interceptors, automatic JSON transformation, and request cancellation. Compared to http-call, Axios offers more advanced features and a larger community support.
Node-fetch is a lightweight module that brings the Fetch API to Node.js. It is minimalistic and focuses on providing a simple API for making HTTP requests. Compared to http-call, node-fetch is more aligned with the Fetch API standard used in browsers.
Request is a simplified HTTP client for Node.js with support for various authentication mechanisms, redirects, and more. Although it is now deprecated, it was widely used for its ease of use and extensive feature set. Compared to http-call, request had a more comprehensive feature set but is no longer maintained.
FAQs
make http requests
The npm package http-call receives a total of 786,834 weekly downloads. As such, http-call popularity was classified as popular.
We found that http-call demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.