Skip to main content
Castov

gaxios

v8.3.1CRITICAL Risk

A simple common HTTP client specifically for Google APIs and services.

D40/100
Install Command
npm install gaxios
orpnpm add gaxios
Typosquat Defense
Critical Alert

Suspected impersonation of "axios". Verify package source!

Lifecycle Scripts
Clean Execution

Zero preinstall or postinstall arbitrary execution hooks.

License Type
Apache-2.0

Permissive open-source license. Safe for enterprise & proprietary software.

Package Specifications

Unpacked Size
225.3 KB
Dependencies
3
Maintainers
1
Last Published
Oct 15, 2026
View on npmjs.comGitHub Repository

Direct Dependencies (3)

extend ^3.0.2node-fetch ^3.3.2https-proxy-agent ^7.0.1
Free VS Code Extension

Detect Supply Chain Attacks Directly in Your Editor

Get instant CodeLens risk scores, typosquatting warnings, and license audits right inside your package.json file with zero configuration.

Install Dependency Risk Lens

Frequently Asked Questions

Is gaxios safe to use in production?
gaxios received a Security Grade of D (40/100) with a risk evaluation of CRITICAL. It contains zero malicious postinstall scripts.
What license does gaxios use?
gaxios is licensed under the Apache-2.0 license (PERMISSIVE). This is a permissive open-source license suitable for commercial applications.
How do I install gaxios?
Install it via NPM using: npm install gaxios, or via PNPM: pnpm add gaxios, or Yarn: yarn add gaxios.