{"full_name":"axios/axios","owner":"axios","name":"axios","url":"https://github.com/axios/axios","description":"Promise based HTTP client for the browser and node.js","homepage":"https://axios-http.com","topics":[],"language":"JavaScript","license":"MIT","avatar":"https://avatars.githubusercontent.com/u/32372333?v=4","created_at":"2014-08-18T22:30:27Z","pushed_at":"2026-11-10T06:44:47Z","metrics":{"stars":109297,"forks":11985,"watchers":1184,"issues":5090,"prs":2967,"releases":127,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":203},"growth":{"day":{"stars":-1,"forks":0,"base_day":"2026-11-09"},"week":{"stars":-18,"forks":1,"base_day":"2026-11-03"},"month":{"stars":-48,"forks":87,"base_day":"2026-10-11"}},"history":{"dates":["2026-09-06","2026-09-07","2026-09-08","2026-09-09","2026-09-10","2026-09-11","2026-09-12","2026-09-13","2026-09-14","2026-09-15","2026-09-16","2026-09-17","2026-09-18","2026-09-19","2026-09-20","2026-09-21","2026-09-22","2026-09-23","2026-09-24","2026-09-25","2026-09-26","2026-09-27","2026-09-28","2026-09-29","2026-09-30","2026-10-01","2026-10-02","2026-10-03","2026-10-04","2026-10-05","2026-10-06","2026-10-07","2026-10-08","2026-10-09","2026-10-10","2026-10-11","2026-10-12","2026-10-13","2026-10-14","2026-10-15","2026-10-16","2026-10-17","2026-10-18","2026-10-19","2026-10-20","2026-10-21","2026-10-22","2026-10-23","2026-10-24","2026-10-25","2026-10-26","2026-10-27","2026-10-28","2026-10-29","2026-10-30","2026-10-31","2026-11-01","2026-11-02","2026-11-03","2026-11-04","2026-11-09","2026-11-10"],"stars":[109188,109219,109231,109234,109226,109228,109222,109215,109215,109212,109208,109202,109205,109207,109205,109203,109209,109213,109209,109210,109215,109227,109234,109243,109246,109251,109249,109246,109246,109282,109303,109347,109350,109344,109344,109345,109367,109360,109381,109300,109303,109300,109300,109300,109301,109303,109302,109307,109306,109309,109310,109307,109308,109309,109308,109308,109307,109308,109315,109317,109298,109297],"forks":[11834,11844,11846,11847,11846,11848,11847,11850,11852,11853,11854,11856,11867,11865,11867,11867,11868,11872,11873,11873,11871,11874,11877,11881,11886,11885,11887,11890,11891,11892,11893,11893,11892,11894,11898,11898,11901,11910,11933,11928,11931,11933,11931,11929,11933,11935,11936,11935,11940,11941,11946,11951,11957,11958,11963,11971,11973,11978,11984,11989,11985,11985],"watchers":[1179,1180,1180,1180,1179,1178,1178,1178,1178,1178,1179,1179,1178,1177,1177,1177,1177,1176,1176,1177,1177,1177,1177,1177,1177,1177,1177,1177,1177,1177,1177,1177,1177,1177,1182,1182,1182,1181,1192,1192,1191,1189,1189,1189,1189,1189,1189,1189,1189,1184,1185,1184,1184,1185,1184,1184,1184,1184,1184,1184,1184,1184],"issues_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"prs_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null]},"boards":{"total":122},"same_owner":[],"issues":[{"number":4901,"title":"Support customisation of supported protocols","comments":25,"created_at":"2022-08-03T15:42:46Z"},{"number":10713,"title":"feature request: `transformRequest` must be able to be asynchronous","comments":11,"created_at":"2026-04-14T15:45:07Z"},{"number":7271,"title":"Remove CreateAxiosDefaults[\"lookup\"] in favor of NodeJS Agent[\"lookup\"]","comments":11,"created_at":"2025-11-29T09:52:29Z"},{"number":4836,"title":"AxiosError's toJSON skips response","comments":9,"created_at":"2022-07-08T09:06:23Z"},{"number":6587,"title":"Authorization header on Instance vs Request","comments":7,"created_at":"2024-09-03T11:04:34Z"},{"number":6984,"title":"Feature suggestions from stale issues","comments":6,"created_at":"2025-07-30T16:13:50Z"},{"number":11030,"title":"Old version of https-proxy-agent used","comments":5,"created_at":"2026-06-23T07:19:53Z"},{"number":6591,"title":"CommonJS / ESM mixup when using a lib that has Axios has peer dependency","comments":5,"created_at":"2024-09-05T12:20:56Z"}],"discussions":[{"number":11297,"title":"Getting vulnerabilities issue","comments":2,"category":"General","created_at":"2026-10-06T04:16:11Z"},{"number":11129,"title":"Axios CVEs duplicates ?","comments":0,"category":"Q&A","created_at":"2026-08-06T14:41:18Z"},{"number":10873,"title":"How can I cancel an Axios request when a component unmounts?","comments":1,"category":"Q&A","created_at":"2026-05-09T18:56:51Z"},{"number":10872,"title":"How can I automatically retry failed requests in Axios?","comments":1,"category":"Q&A","created_at":"2026-05-09T18:47:10Z"},{"number":10803,"title":"Embed Agent Friendly Code Score Badge","comments":1,"category":"General","created_at":"2026-04-27T11:16:11Z"},{"number":10797,"title":"Best practices for handling API errors in Axios for beginners?","comments":1,"category":"Q&A","created_at":"2026-04-22T18:27:15Z"},{"number":10734,"title":"NPM reporting 1 - 1.14.0 as Critical","comments":1,"category":"Q&A","created_at":"2026-04-16T16:32:27Z"},{"number":10696,"title":"is Axios safe ?","comments":1,"category":"General","created_at":"2026-04-12T08:27:00Z"}],"latest_release":{"name":"v1.21.0","tag":"v1.21.0","published_at":"2026-10-26T07:10:45Z","body":"## v1.21.0 — October 21, 2026\r\n\r\nThis release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.\r\n\r\n## ⚠️ Breaking Changes & Deprecations\r\n\r\n* **Header Defaults:** Only plain objects, null-prototype maps, and compatible `AxiosHeaders` instances are treated as common or method-specific defaults; literal headers such as `Link` are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example `{ post: { ...customDefaults } }`, or compatible `AxiosHeaders`. Otherwise, those instances become literal header values, including on requests using other methods. (__[#11156](https://github.com/axios/axios/pull/11156)__)\r\n\r\n## 🚀 New Features\r\n\r\n* **Response Timing:** Added `response.duration`, in milliseconds, including on `error.response` when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing `duration` value supplied by a custom adapter. (__[#11214](https://github.com/axios/axios/pull/11214)__)\r\n* **UTF-8 Basic Authentication:** Added `transitional.encodeBasicAuthUsername: true` to support Unicode usernames in XHR and Fetch requests. The option defaults to `false`, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (__[#11159](https://github.com/axios/axios/pull/11159)__)\r\n\r\n## 🐛 Bug Fixes\r\n\r\n* **Fetch Compatibility:** Restored requests in runtimes such as Cloudflare Workers that reject the implicit `cache: 'default'`, while preserving explicit caller settings. Response-size failures now retain their original `ERR_BAD_RESPONSE` and request context when runtime wrappers replace the underlying stream error. (__[#11194](https://github.com/axios/axios/pull/11194)__, __[#11179](https://github.com/axios/axios/pull/11179)__)\r\n* **Runtime Consistency:** Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with `ERR_BAD_OPTION_VALUE`, and sparse or non-index numeric form fields serialize as keyed objects. With `proxy: false`, native `proxyEnv` agents using unsupported pool-management or TLS-session lifecycle overrides now reject with `ERR_BAD_OPTION_VALUE`; construct those agents without `proxyEnv`. (__[#11242](https://github.com/axios/axios/pull/11242)__)\r\n* **Header Handling:** Preserved headers named `__proto__` using safe casing without changing the `AxiosHeaders` instance prototype. Function matchers in `has()`, `delete()`, and `clear()` now receive the headers instance as `this`, matching their declared contract. (__[#11134](https://github.com/axios/axios/pull/11134)__, __[#11216](https://github.com/axios/axios/pull/11216)__)\r\n* **URL and Data URL Parsing:** Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (__[#11138](https://github.com/axios/axios/pull/11138)__, __[#11163](https://github.com/axios/axios/pull/11163)__, __[#11294](https://github.com/axios/axios/pull/11294)__)\r\n* **Error Diagnostics:** Preserved short reconstructed request stacks and appended wrapped error stacks under `Caused by:` so tooling that reads only `error.stack` retains the original failure context. (__[#11132](https://github.com/axios/axios/pull/11132)__, __[#11142](https://github.com/axios/axios/pull/11142)__)\r\n* **Interceptor Removal:** Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (__[#11139](https://github.com/axios/axios/pull/11139)__)\r\n* **Proxy TLS:** HTTPS CONNECT tunnels now apply current origin TLS "},"readme":true,"readme_zh":false,"news":[{"title":"Post Mortem: axios NPM supply chain compromise","url":"https://github.com/axios/axios/issues/10636","hn":"https://news.ycombinator.com/item?id=47621792","source":"Hacker News","lang":"en","date":"2026-04-03","points":291,"comments":142},{"title":"Node.js HTTP client axios pushes broken update breaking production apps","url":"https://github.com/axios/axios/issues/5038","hn":"https://news.ycombinator.com/item?id=33119796","source":"Hacker News","lang":"en","date":"2022-10-07","points":19,"comments":24},{"title":"TypeError: Axios.get is not a function (v1.1.0)","url":"https://github.com/axios/axios/issues/5038","hn":"https://news.ycombinator.com/item?id=33128235","source":"Hacker News","lang":"en","date":"2022-10-07","points":5,"comments":8},{"title":"Axios: Unrestricted Cloud Metadata Exfiltration via Header Injection Chain","url":"https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx","hn":"https://news.ycombinator.com/item?id=47724033","source":"Hacker News","lang":"en","date":"2026-04-10","points":3,"comments":0},{"title":"Axios Released v1.0.0","url":"https://github.com/axios/axios/releases/tag/v1.0.0","hn":"https://news.ycombinator.com/item?id=33085658","source":"Hacker News","lang":"en","date":"2022-10-04","points":2,"comments":1},{"title":"Axios 1.0.0","url":"https://github.com/axios/axios/blob/v1.x/CHANGELOG.md","hn":"https://news.ycombinator.com/item?id=33087838","source":"Hacker News","lang":"en","date":"2022-10-04","points":2,"comments":0},{"title":"Axios: Promise based HTTP client for the browser and Node.js","url":"https://github.com/axios/axios","hn":"https://news.ycombinator.com/item?id=20695702","source":"Hacker News","lang":"en","date":"2019-08-14","points":2,"comments":0},{"title":"Axios Adds Fetch Adapter","url":"https://github.com/axios/axios/pull/6371","hn":"https://news.ycombinator.com/item?id=40296638","source":"Hacker News","lang":"en","date":"2024-05-08","points":1,"comments":1},{"title":"OpenAI takes on GitHub with Pierre Computer acquisition","url":"https://www.heise.de/en/news/OpenAI-takes-on-GitHub-with-Pierre-Computer-acquisition-11512809.html","source":"heise online","lang":"en","date":"2026-11-05"},{"title":"Exclusive: OpenAI targets Microsoft's GitHub with deal for startup","url":"https://www.msn.com/en-us/technology/tech-companies/exclusive-openai-targets-microsoft-s-github-with-deal-for-startup/ar-AA2gJTi1","source":"Axios on MSN","lang":"en","date":"2026-11-04"},{"title":"Taking on Microsoft’s GitHub? Why OpenAI is buying a startup whose tech already powers Codex","url":"https://www.msn.com/en-in/news/other/taking-on-microsoft-s-github-why-openai-is-buying-a-startup-whose-tech-already-powers-codex/ar-AA2gKGQr","source":"NDTV Profit on MSN","lang":"en","date":"2026-11-04"},{"title":"OpenAI Acquires Pierre Computer to Bring Code Storage to Codex","url":"https://shiftdelete.net/en/openai-acquires-pierre","source":"ShiftDelete.Net","lang":"en","date":"2026-11-04"},{"title":"OpenAI rotates macOS certs after Axios attack hit code-signing workflow","url":"https://www.bleepingcomputer.com/news/security/openai-rotates-macos-certs-after-axios-attack-hit-code-signing-workflow/","source":"BleepingComputer","lang":"en","date":"2026-04-13"},{"title":"Axios Front-End Library npm Supply Chain Poisoning Alert","url":"https://securityboulevard.com/2026/03/axios-front-end-library-npm-supply-chain-poisoning-alert/","source":"Security Boulevard","lang":"en","date":"2026-03-31"},{"title":"On the Axios Supply Chain Compromise","url":"https://note.com/cuon/n/n835673c00fa2?hl=en","source":"note","lang":"en","date":"2026-03-31"},{"title":"Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install","url":"https://securityboulevard.com/2026/03/poisoned-axios-npm-account-takeover-50-million-downloads-and-a-rat-that-vanishes-after-install/","source":"Security Boulevard","lang":"en","date":"2026-03-30"},{"title":"Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account","url":"https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html","source":"The Hacker News","lang":"en","date":"2026-03-30"},{"title":"Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads","url":"https://www.trendmicro.com/zh_hk/research/26/c/axios-npm-package-compromised.html","source":"Trend Micro","lang":"en","date":"2026-03-30"},{"title":"GitHub不堪重负！OpenAI收购替代品，A社原地自研，马斯克也要搞","url":"https://news.google.com/rss/articles/CBMiU0FVX3lxTFBqU1FkRWc2X3JHUHNkNkhsRnpFQjZNVk5vRzNIRGhldnVNTHBtR1U1QjlSaGpxVFRSMTlJb3dISnlaT1U1VmhoYVRRLUVLVk9EWHQ4?oc=5","source":"搜狐网","lang":"zh","date":"2026-11-07"},{"title":"OpenAI 将收购 Pierre Computer，计划把 Code Storage 整合进 Codex，瞄准微软 GitHub","url":"https://news.google.com/rss/articles/CBMiSEFVX3lxTE5zLWY1MW00MHA2ejNNMVF0c1ZJbkZ4eTRuV09YRmVlcDh0WEN5MjNZRU9FV0lGT25GM0VsVWxmcEctdWl4clQ4NA?oc=5","source":"智源社区","lang":"zh","date":"2026-11-04"},{"title":"独家：OpenAI将收购Pierre Computer，AI编程挑战GitHub","url":"https://news.google.com/rss/articles/CBMiowFBVV95cUxQNnBTZHFXTHNQMEZxbXo3UWQybXRaeGs4ejZVc2Q2eXR4WnZkWGZaQ2Q0WTFaMkk1YkZuYWZzOGxGdG9kcF8xd1BsckV5LWJZVklncG85clVDN1pEWktvRlNaY21JRGY1YmdTMk5YeTBITkVlcURIRTAxd0Z0VkZ0dUFfekZwa2JJLWw0RlVlVTBVamM3MkpGRGdESUlrME9QckRj?oc=5","source":"Mezha.net","lang":"zh","date":"2026-11-04"},{"title":"U.K. government reports OpenAI, Anthropic models attempted to hack companies","url":"https://news.google.com/rss/articles/CBMif0FVX3lxTFBCQ3RLbHlKZ2VuWTR1X3hKMlUzVFQ2NS1YZDVSQjdwZl9hVFNiMlZaYzlEQ1IzY1Y1WDB6M1NwTjFJcEdtYV9zZ3JPWDJ3Z0VENmNpVWR4Uk1Ld3NRSk5zLWoxSG50LW5qVkV4enA4TWR3ZDdqZTN3RnRjYTg0LW8?oc=5","source":"Axios","lang":"en","date":"2026-08-04"},{"title":"Claude刷爆5亿，一夜涨60倍，你的Token账单还撑得住？","url":"https://news.google.com/rss/articles/CBMiTkFVX3lxTE5IdC1XZXdsUzlpMU41Yi1mLUt1Q19IRUZZN1RoVU5qTjFUV252Zk56dFo2LU5xY3A4alkzajZodm5hbllDR3dTTHdndU5CUQ?oc=5","source":"36Kr","lang":"zh","date":"2026-06-01"},{"title":"npm 爆发重大供应链攻击：Axios 被植入远控木马，影响或已扩散","url":"https://news.google.com/rss/articles/CBMiXkFVX3lxTE53T05ZTjlBNng4U2VPQmZESktIN1NmQW03eFRMSDBiZm82eUVXaUFPclBQbmJaUDBmMnhmQUFUem82bF91bVl1ZndlelRjRGNvZ2RtZlZWSmdUdlhpanc?oc=5","source":"InfoQ.cn","lang":"zh","date":"2026-04-07"},{"title":"Behind the Scenes: How StepSecurity Detected and Helped Remediate the Largest npm Supply Chain Attack","url":"https://news.google.com/rss/articles/CBMizgFBVV95cUxOTTVWWE04X1dpT19jV3BoRHc3akdMTEpjeGMyY0IxN29FWklKVUVMelFQczNDTU04S01GZFlRbU56TE1GcHZaTHNNbDVXMkQ2YS1YMFpXTFczeURESHFBVWZ1MnY3SEFtcU9yTUhHZXA2V21WWDRnMkFjWGxIMkU0SThocGRsaGQ2cEhJNGlLSEs2NHRuRGJEczE3VkxYck5vVXcwTGNCdUs2Y1lKZEEwRzM3eDlmZEUxMWQzYWFCVVR4YndNUEtTRS1tX1Nadw?oc=5","source":"Step Security","lang":"en","date":"2026-04-06"},{"title":"Hackers Hijack Axios npm Package to Spread RATs","url":"https://news.google.com/rss/articles/CBMiggFBVV95cUxOeE0yZWE0UHMxN2JZeEJCS2lQTk1kbjFmbGc5RTMyUkFGUWl3dGVJazRWRWwtdjhrWlVxMkNqYXNrenNIM1pESExEc1dUMFBGUnJQeFpETXJPSXlramRwek5qMXk5eWJSZmtiNGQ0cDNSUkdaZEtEdW9RVUFWbWIwZG1R?oc=5","source":"Infosecurity Magazine","lang":"en","date":"2026-04-01"},{"title":"开源 HTTP 客户端库Axios 遭供应链劫持，恶意版本植入跨平台木马","url":"https://news.google.com/rss/articles/CBMiS0FVX3lxTE82RzVEME9GNHZia1J3bVg1MnIwR2dobUNNMlV3TEw1bEhLYWdhQzVnNE5ZWFJ4VmRTLUtza05mLWRZMUd6WmxmWDJ5Yw?oc=5","source":"OSCHINA","lang":"zh","date":"2026-03-31"}],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}