Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ky-universal
Advanced tools
The ky-universal package is a tiny HTTP client based on the Fetch API, designed to work in both Node.js and browser environments. It provides a simple and modern API for making HTTP requests, handling JSON, and dealing with common HTTP tasks.
Simple GET Request
This feature allows you to make a simple GET request to fetch data from a URL. The response is automatically parsed as JSON.
const ky = require('ky-universal');
(async () => {
const json = await ky('https://jsonplaceholder.typicode.com/todos/1').json();
console.log(json);
})();
POST Request with JSON Body
This feature allows you to make a POST request with a JSON body. The response is also parsed as JSON.
const ky = require('ky-universal');
(async () => {
const json = await ky.post('https://jsonplaceholder.typicode.com/posts', {
json: {
title: 'foo',
body: 'bar',
userId: 1
}
}).json();
console.log(json);
})();
Handling Errors
This feature demonstrates how to handle errors when making requests. If the request fails, the error is caught and logged.
const ky = require('ky-universal');
(async () => {
try {
const json = await ky('https://jsonplaceholder.typicode.com/invalid-endpoint').json();
console.log(json);
} catch (error) {
console.log('Error:', error);
}
})();
Retry Mechanism
This feature shows how to use the retry mechanism. If the request fails, it will automatically retry up to the specified number of times.
const ky = require('ky-universal');
(async () => {
const json = await ky('https://jsonplaceholder.typicode.com/todos/1', {
retry: 3
}).json();
console.log(json);
})();
Axios is a popular HTTP client for both Node.js and the browser. It provides a similar feature set to ky-universal, including support for promises, JSON handling, and error handling. However, Axios has a larger footprint and more configuration options.
Node-fetch is a lightweight module that brings the Fetch API to Node.js. It is similar to ky-universal in that it is based on the Fetch API, but it does not include some of the higher-level features like automatic JSON parsing and retry mechanisms.
Superagent is a robust HTTP client for Node.js and the browser. It offers a wide range of features, including support for various request types, plugins, and advanced configuration options. It is more feature-rich compared to ky-universal but also more complex.
Use Ky in both Node.js and browsers
Ky is made for browsers, but this package makes it possible to use it in Node.js too, by polyfilling most of the required browser APIs using node-fetch
and abort-controller
.
This package can be useful for:
Note: Before opening an issue, make sure it's an issue with Ky and not its polyfills. Generally, if something works in the browser, but not in Node.js, it's an issue with node-fetch
or abort-controller
.
Keep in mind that Ky targets modern browsers when used in the browser. For older browsers, you will need to transpile and use a fetch
polyfill.
If you only target Node.js, I would strongly recommend using Got instead.
$ npm install ky ky-universal
Note that you also need to install ky
.
const ky = require('ky-universal');
(async () => {
const parsed = await ky('https://httpbin.org/json').json();
// …
})();
ReadableStream
supportFor ReadableStream
support, also install web-streams-polyfill
:
$ npm install web-streams-polyfill
You can then use it normally:
const ky = require('ky-universal');
(async () => {
const {body} = await ky('https://httpbin.org/bytes/16');
const {value} = await body.getReader().read();
const result = new TextDecoder('utf-8').decode(value);
// …
})();
The API is exactly the same as the Ky API.
Use it like you would use Ky:
import ky from 'ky-universal';
(async () => {
const parsed = await ky('https://httpbin.org/json').json();
// …
})();
Webpack will ensure the polyfills are only included and used when the app is rendered on the server-side.
Put the following in package.json:
{
"ava": {
"require": [
"ky-universal"
]
}
}
The library that uses Ky will now just work in AVA tests.
FAQs
Use Ky in both Node.js and browsers
The npm package ky-universal receives a total of 183,208 weekly downloads. As such, ky-universal popularity was classified as popular.
We found that ky-universal demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.