Tag
fetch
Safeguard articles tagged "fetch" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Open Source
isomorphic-fetch: Security Review and Modern Alternatives
isomorphic-fetch has not shipped a release since 2020, yet thousands of projects still install it. What that means for your security posture, and what to use instead.
May 8, 20256 min read
Open Source
cross-fetch: Package Health and Security Review
cross-fetch still ships in thousands of lockfiles as a universal fetch polyfill. A review of its one CVE, its node-fetch dependency, and when you no longer need it.
Apr 22, 20256 min read