@fetchkit/ffetch 5.4.8 → 5.4.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +19 -0
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -4,6 +4,7 @@
|
|
|
4
4
|
|
|
5
5
|
|
|
6
6
|
|
|
7
|
+
[](https://scorecard.dev/viewer/?uri=github.com/fetch-kit/ffetch)
|
|
7
8
|
|
|
8
9
|
|
|
9
10
|
|
|
@@ -48,6 +49,7 @@ ffetch uses a plugin architecture for optional features, so you only include wha
|
|
|
48
49
|
- [Fetch vs. Axios vs. ky vs. `ffetch`](#fetch-vs-axios-vs-ky-vs-ffetch)
|
|
49
50
|
- [Try ffetch in Action](#try-ffetch-in-action)
|
|
50
51
|
- [Join the Community](#join-the-community)
|
|
52
|
+
- [Security](#security)
|
|
51
53
|
- [Contributing](#contributing)
|
|
52
54
|
- [License](#license)
|
|
53
55
|
|
|
@@ -385,6 +387,23 @@ Got questions, want to discuss features, or share examples? Join the **Fetch-Kit
|
|
|
385
387
|
|
|
386
388
|
[](https://discord.gg/sdyPBPCDUg)
|
|
387
389
|
|
|
390
|
+
## Security
|
|
391
|
+
|
|
392
|
+
`ffetch` is scored at **7.4/10** by the [OpenSSF Scorecard](https://securityscorecards.dev/), an automated security health check for open source projects.
|
|
393
|
+
|
|
394
|
+
The score reflects:
|
|
395
|
+
- ✅ Pinned GitHub Actions dependencies
|
|
396
|
+
- ✅ CodeQL static analysis on every PR and push to main
|
|
397
|
+
- ✅ Dependabot for dependency updates and security alerts
|
|
398
|
+
- ✅ npm publish with OIDC provenance attestations
|
|
399
|
+
- ✅ Security policy and private vulnerability reporting
|
|
400
|
+
- ✅ Branch protection on `main`
|
|
401
|
+
- ✅ SPDX SBOM attached to every release
|
|
402
|
+
|
|
403
|
+
The score is capped below 10 due to being a solo-maintained project (no mandatory code review or multiple org contributors). [View the full breakdown](https://scorecard.dev/viewer/?uri=github.com/fetch-kit/ffetch).
|
|
404
|
+
|
|
405
|
+
To report a security vulnerability, see [SECURITY.md](./SECURITY.md).
|
|
406
|
+
|
|
388
407
|
## Contributing
|
|
389
408
|
|
|
390
409
|
- **Issues**: [GitHub Issues](https://github.com/fetch-kit/ffetch/issues)
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@fetchkit/ffetch",
|
|
3
|
-
"version": "5.4.
|
|
3
|
+
"version": "5.4.11",
|
|
4
4
|
"description": "Fetch wrapper with configurable timeouts, retries, and TypeScript-first DX",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"fetch",
|
|
@@ -90,18 +90,18 @@
|
|
|
90
90
|
"devDependencies": {
|
|
91
91
|
"@changesets/cli": "^2.29.5",
|
|
92
92
|
"@eslint/js": "^9.33.0",
|
|
93
|
-
"@types/node": "^
|
|
93
|
+
"@types/node": "^25.9.1",
|
|
94
94
|
"@typescript-eslint/eslint-plugin": "^8.39.0",
|
|
95
95
|
"@typescript-eslint/parser": "^8.39.0",
|
|
96
96
|
"@vitest/coverage-v8": "^3.2.4",
|
|
97
97
|
"eslint": "^9.33.0",
|
|
98
98
|
"happy-dom": "^20.9.0",
|
|
99
|
-
"husky": "^
|
|
100
|
-
"jsr": "^0.
|
|
101
|
-
"lint-staged": "^
|
|
99
|
+
"husky": "^9.1.7",
|
|
100
|
+
"jsr": "^0.14.3",
|
|
101
|
+
"lint-staged": "^17.0.5",
|
|
102
102
|
"prettier": "^3.6.2",
|
|
103
103
|
"tsup": "^8.5.0",
|
|
104
|
-
"typescript": "^
|
|
104
|
+
"typescript": "^6.0.3",
|
|
105
105
|
"vitest": "^3.2.4"
|
|
106
106
|
}
|
|
107
107
|
}
|