Axios

Why it's ranked here

Axios is a strong general-purpose client because one package covers browser, Node.js, React Native, and Bun entry points while supporting both CommonJS and ES modules. Its declared TypeScript types, adapter architecture, configurable transformations, and explicit security guidance make it practical for shared application infrastructure.

What's good

Request handling covers JSON, URL-encoded data, multipart forms, buffers, streams, files, blobs, and readable streams. Separate client instances can inherit and merge defaults. The package exposes structured errors, header utilities, status constants, adapter selection, form conversion, and cancellation-related types. Its utilities also contain explicit defenses against prototype-pollution tricks.

Tradeoffs

Node.js response and body limits default to unlimited, so compressed responses from untrusted servers can exhaust memory unless applications set suitable ceilings. Several configuration options have security consequences around redirects, secret headers, local sockets, cross-origin XSRF behavior, error logging, and custom form headers. Teams must establish safe defaults instead of accepting every package default.

How to use it well

Use Axios when browser, Node.js, React Native, or Bun code needs a shared request layer with consistent transformations, errors, types, and per-service configuration. Create bounded clients for each trusted API, cap response and body sizes, validate untrusted paths, and redact secrets from errors. It sends requests; it does not define or host the APIs they reach.

Observed

License

MIT

Primary language

JavaScript, with bundled TypeScript declarations

Interface

Importable HTTP client library

Packaging

npm package with ES module and CommonJS entry points, plus browser CDN bundles

Platform support

Browser, Node.js, React Native, and Bun export conditions

Transport adapters

XHR, Node HTTP, and Fetch

Testing structure

Vitest projects plus CommonJS, ES module, Deno, and Bun smoke-test scripts