</>PackageGraphPackageGraph

undici

npmv8.10.2TypeScript

An HTTP/1.1 client, written from scratch for Node.js

Safe to adopt

Yes — undici scores well across adoption, maintenance, weight, supply chain, and licensing. 158.5M downloads per week and 15 known dependents. Last published 5 days ago. 50 releases in the last 2 years.

  • AAdoption: grade A, Excellent.

    158.5M downloads per week and 15 known dependents.

  • AMaintenance: grade A, Excellent.

    Last published 5 days ago. 50 releases in the last 2 years.

  • AWeight: grade A, Excellent.

    Zero runtime dependencies, about 1.8 MB installed.

  • ASupply chain: grade A, Excellent.

    No install scripts, 3 maintainers, and a contained dependency surface.

  • ALicense: grade A, Excellent.

    MIT — permissive, with no copyleft found in the dependency tree.

Grades are computed deterministically from registry metadata collected by PackageGraph — downloads, dependents, publish dates, the resolved dependency tree, maintainer count, and declared licenses. No third-party scores are used.

Install cost

What you actually take on by adding undici to a project.

0
Direct dependencies

Runtime packages this one declares itself.

0
Total installed

Distinct packages in the full runtime tree, deduplicated the way a package manager would.

1.8 MB
Install size

Unpacked size of this package plus its entire runtime tree.

Tree depth

Longest resolved dependency chain below this package.

Compatibility

Node.js
node >=22.19.0
Module format
CommonJS only
TypeScript
Types included
Install scripts
None

Quick start

A usage example from the undici README.

// Available globally in Node.js v18+
const response = await fetch('https://api.example.com/data');
const data = await response.json();

// Check the bundled undici version
console.log(process.versions.undici); // e.g., "5.28.4"

undici vs the alternatives

Packages solving a similar problem in the npm ecosystem, compared on the signals that drive an adoption decision.

PackageWeekly downloadsDependentsLicenseLast release
undicithis page158.5M15MIT5 days ago
node-fetch172.9M9MIT1 day ago
cross-fetch32.9M2MIT1 day ago
@mswjs/interceptors20.3M1MIT1 day ago
axios106.5M4MIT1 day ago
make-fetch-happen22.8M1ISC1 day ago

Dependencies

Declared by undici v8.10.2. Runtime dependencies are installed with the package; dev dependencies are not.

Dev (22)

@fastify/busboy 3.2.2@matteo.collina/tspl ^0.2.0@metcoder95/https-pem ^1.0.0@sinonjs/fake-timers ^12.0.0@types/node ^22.0.0abort-controller ^3.0.0borp ^1.0.0c8 ^12.0.0cross-env ^10.0.0dns-packet ^5.4.0esbuild ^0.28.0eslint ^9.9.0fast-check ^4.1.1husky ^9.0.7jest ^30.0.5jsondiffpatch ^0.7.3neostandard ^0.13.0node-forge ^1.3.1proxy ^4.0.0tsd ^0.33.0typescript ^6.0.2ws ^8.11.0

Used by

Popular packages that depend on undici.

Relationship graph

Dependencies (left) and dependents (right) of undici.

Frequently installed together

Release history

50 releases in the last two years, typically about 2 days apart.

Recent versions of undici
VersionPublishedSizeLicense
7.29.15 days ago1.6 MBMIT
6.28.15 days ago1.1 MBMIT
8.10.2latest5 days ago1.8 MBMIT
8.10.19 days ago1.8 MBMIT
8.10.01 month ago1.8 MBMIT
6.28.01 month ago1.1 MBMIT
7.29.01 month ago1.6 MBMIT
8.9.01 month ago1.8 MBMIT
8.8.01 month ago1.8 MBMIT
8.7.02 months ago1.7 MBMIT
8.6.02 months ago1.7 MBMIT
6.27.02 months ago1.1 MBMIT
7.28.02 months ago1.5 MBMIT
8.5.02 months ago1.6 MBMIT
8.4.13 months ago1.6 MBMIT

Overview

undici is an npm package that an HTTP/1.1 client, written from scratch for Node.js. It is extremely widely used, with about 158.5M downloads per week and 15 known dependents in the graph. The latest version is 8.10.2, released under the MIT license.

Who should use it

Teams working in the npm ecosystem who need an HTTP/1.1 client, written from scratch for Node.js and value a battle-tested, widely-adopted solution.

When not to use it

Consider an alternative if you need to minimize your dependency tree, or if a more actively-maintained option better fits your npm stack.

Pros

  • Large, well-established user base (158.5M weekly downloads).
  • Ships TypeScript type definitions.
  • Clear open-source license (MIT).

Cons

  • Large dependency tree (22 direct dependencies) increases install size and audit surface.

Auto-generated from collected registry metadata. No external claims are inferred.

Maintainers

Keywords

Frequently asked questions

Should I use undici?

Yes — undici scores well across adoption, maintenance, weight, supply chain, and licensing. 158.5M downloads per week and 15 known dependents. Last published 5 days ago. 50 releases in the last 2 years.

How do I install undici?

Run `npm install undici` to add undici to your npm project.

What license is undici released under?

undici is distributed under the MIT license.

How popular is undici?

undici has approximately 158,539,585 downloads per week and 15 known dependent packages.

Is undici still maintained?

The most recent release of undici (v8.10.2) was published 5 days ago.

Does undici run install scripts?

No. undici does not define preinstall, install, or postinstall scripts, so installing it does not execute publisher-supplied code.