nodejs/undici

An HTTP/1.1 client, written from scratch for Node.js

JavaScript

7.7k

1k

375 contributors

MIT License

FeaturedAdvertise to 180K+ monthly visitors

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast nodejs/undici is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 5 – Nov 4, 2026

Stars +46 in 61 days

5

Forks +146 in 61 days

11

Merged PRs 175 in 61 days

19

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 5Sep 13Sep 21Sep 29Oct 7Oct 15Oct 23Oct 31

Stars, forks, merged pull requests and Trendshift Trending rank, by day
Day	Stars gained	Forks gained	Merged PRs
Sat, Sep 5, 2026	+0	+2	0
Sun, Sep 6, 2026	+1	+1	0
Mon, Sep 7, 2026	+1	+1	2
Tue, Sep 8, 2026	+0	+0	0
Wed, Sep 9, 2026	+0	+3	1
Thu, Sep 10, 2026	+0	+3	2
Fri, Sep 11, 2026	+2	+0	1
Sat, Sep 12, 2026	+0	+4	1
Sun, Sep 13, 2026	+1	+0	8
Mon, Sep 14, 2026	+0	+4	6
Tue, Sep 15, 2026	+2	+7	5
Wed, Sep 16, 2026	+0	+2	2
Thu, Sep 17, 2026	+1	+1	1
Fri, Sep 18, 2026	+0	+0	3
Sat, Sep 19, 2026	+1	+0	0
Sun, Sep 20, 2026	+1	+2	0
Mon, Sep 21, 2026	+0	+1	10
Tue, Sep 22, 2026	+2	+1	3
Wed, Sep 23, 2026	+2	+1	3
Thu, Sep 24, 2026	+3	+1	19
Fri, Sep 25, 2026	+0	+2	14
Sat, Sep 26, 2026	+0	+3	0
Sun, Sep 27, 2026	+1	+2	0
Mon, Sep 28, 2026	+1	+2	2
Tue, Sep 29, 2026	+1	+5	0
Wed, Sep 30, 2026	+0	+8	4
Thu, Oct 1, 2026	+1	+2	3
Fri, Oct 2, 2026	+0	+2	0
Sat, Oct 3, 2026	+0	+1	1
Sun, Oct 4, 2026	+0	+3	1
Mon, Oct 5, 2026	+0	+3	5
Tue, Oct 6, 2026	+2	+6	1
Wed, Oct 7, 2026	+1	+3	6
Thu, Oct 8, 2026	+0	+1	17
Fri, Oct 9, 2026	+0	+1	1
Sat, Oct 10, 2026	+0	+2	2
Sun, Oct 11, 2026	+0	+1	1
Mon, Oct 12, 2026	+1	+2	0
Tue, Oct 13, 2026	+5	+2	0
Wed, Oct 14, 2026	+1	+3	9
Thu, Oct 15, 2026	+0	+3	6
Fri, Oct 16, 2026	+1	+2	1
Sat, Oct 17, 2026	+0	+0	2
Sun, Oct 18, 2026	+0	+1	2
Mon, Oct 19, 2026	+2	+4	8
Tue, Oct 20, 2026	+0	+5	3
Wed, Oct 21, 2026	+1	+9	0
Thu, Oct 22, 2026	+1	+1	4
Fri, Oct 23, 2026	+0	+5	0
Sat, Oct 24, 2026	+1	+1	2
Sun, Oct 25, 2026	+1	+2	0
Mon, Oct 26, 2026	+3	+1	2
Tue, Oct 27, 2026	+3	+3	3
Wed, Oct 28, 2026	+0	+0	0
Thu, Oct 29, 2026	+0	+4	3
Fri, Oct 30, 2026	+0	+0	1
Sat, Oct 31, 2026	+0	+1	0
Sun, Nov 1, 2026	+0	+1	2
Mon, Nov 2, 2026	+0	+4	1
Tue, Nov 3, 2026	+0	+11	1
Wed, Nov 4, 2026	+2	+0	0
Total	+46	+146	175

#1 on the list
Rank that day
Not trending

Mentions and achievements

Where people are talking about nodejs/undici, and every badge it has earned

Jul 295 posts
- GHSA-8xcm-r25x-g524 (medium): the retry interceptor could carry a stale `Content-Length` after resuming a partial response, causing response desync, hangs or corruption downstream. Partial responses…
  Read full on X, posted by @matteocollina
  @matteocollina · x.com
- GHSA-v3r7-h72x-cjcm (medium): unsanitized `domain` and `unparsed` values in `setCookie()` allowed cookie attribute injection. Domains, paths and unparsed attributes are validated more strictly now.
  Read full on X, posted by @matteocollina
  @matteocollina · x.com
- The high one: GHSA-4cwx-7wf7-3272. Malformed qualified `private` Cache-Control directives could leak data between users in a shared cache, or crash the parser. Affects the cache interceptor in v7 and…
  Read full on X, posted by @matteocollina
  @matteocollina · x.com
- GHSA-jr45-8vmc-qm54 (medium): whitespace around `=` in qualified `no-cache` and `private` directives could bypass shared-cache restrictions and expose authenticated responses to other users.…
  Read full on X, posted by @matteocollina
  @matteocollina · x.com
- Undici security release is out: v8.9.0, v7.29.0 and v6.28.0. Five advisories, one high severity and four medium. If you use Undici directly or through fetch() in Node.js, upgrade. npm i undici@^8.9.0…
  Read full on X, posted by @matteocollina
  @matteocollina · x.com
24 days earlier
Jul 51 post
- do it! its kind of a tragedy of the commons at this point. ipaddr.js needs a wrapper that exports a fetch-compatible dispatcher i think.
  Read full on X, posted by @_eljee
  @_eljee · x.com
18 days earlier
Jun 171 post
- 🚨 Low-severity security fix in undici (6.26.0, 7.28.0, 8.5.0) just released! Patches CVE-2026-11525. undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching.
  Read full on X, posted by @kom_256
  @kom_256 · x.com
Jun 111 post
- In the next version of undici (probably), Response.prototype.textStream() and Request.prototype.textStream() will be implemented
  Read full on X, posted by @KhafraDev
  @KhafraDev · x.com
Jun 62 posts
- v7.27.2 fixes a BAD 🐞 I added in v7.27.0 when I added node 26 compat. 😭
  Read full on X, posted by @matteocollina
  @matteocollina · x.com
- New block of @nodejs undici releases today. TL;DR upgrade, critical bugfixes in v7.27.2 and MOAR http/2 perf in v8.4.0 Details in 🧵
  Read full on X, posted by @matteocollina
  @matteocollina · x.com