On Gold's security & health signals, axios is the safer choice.
| Signal | axios | node-fetch |
|---|---|---|
| Safety verdict | Use with caution — high-severity vulnerabilities | Use with caution |
| Safety score | 42/100 | 33/100 |
| Known CVEs | 0 | 3 |
| Critical / High | 63 | 0 |
| Actively exploited (KEV) | No | No |
| Health grade | B | D |
| Weekly downloads | 119.7M | 174.5M |
| License | — | — |
| Deprecated | No | No |
Comparison uses public Gold data (vulnerabilities, CISA KEV, OpenSSF health, downloads, license). It compares the packages' current security posture — evaluate API fit and features separately. See each package's full report, or scan your manifest.