Tag

dependency-upgrades

Safeguard articles tagged "dependency-upgrades" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

node-fetch: Vulnerability History and the Native fetch Upgrade Path

The npm node-fetch package served a decade of HTTP requests and picked up two notable CVEs along the way. Here is its vulnerability history and how to move to native fetch.

Mar 11, 20257 min read