capped-fetch: Node.js fetch wrapper with gzip-bomb and size limits

Fri, 25 Sep 2026 15:49:12 +0000

Engineer — Learn: Useful hardening library for Node.js services that consume untrusted HTTP responses — evaluate for any service that fetches external content without size or decompression-ratio guards. No exploitation pressure; no enrichment signals.
SOC/IR — Skip
Leader — Skip

Defensive-Tooling on CuraSec