agentscope-ai-java/capped-fetch

Node fetch with hard size, compression-ratio and time limits. Stops gzip bombs mid-stream.

SecurityTypeScript#dos#fetch#gzip-bomb#http#nodejs

2.9 Early signal Magnitude out of 10 — how fast interest is growing, not a quality score. Star growth looks organic. Data as of September 26, 2026, 02:37 UTC.

Open on Seismograph Open on GitHub

About the project

A Node.js fetch wrapper with hard limits on decoded body size, compression ratio and total request time; it stops gzip bombs mid-stream. For anyone fetching URLs they don't control.

Useful for

Cap response size when fetching webhooks and link previews from user-supplied URLs
Protect a scraper or proxy from gzip bombs via maxCompressionRatio and maxBytes
Set a single timeout covering connect, redirects and body transfer

README summarized by DeepSeek V4.1 Flash. Details may be inaccurate.

Why it’s trending

0 stars so far today, about 17 expected by the end of the day.
The spike has held for 3 days in a row — not a one-off blip.
The repository is 4 days old and already has 74 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.
Top new repositories this week: #182.

Stars per day

Bars are daily stars, the line is the usual pace. Red marks spike days.

Numbers

Total stars: 74
Today: 0 · ≈ 18 by evening
Forks: 2
Issues and pull requests: 0
Watchers: 0
Language: TypeScript
License: MIT
Created: September 22, 2026
Last push: September 24, 2026

Star trust

Growth looks organic: forks and discussion are in line with active projects, and stars arrive unevenly, the way people give them.

These are heuristics, not a verdict: we judge by the repository’s behavior, not by a list of stargazers.

Spotted in

September 26, 2026Top new repositories this week: #177

README badge

Paste it into your README — the badge shows the current magnitude and links to this page.

[![Seismograph](https://gitnova.dev/badge/agentscope-ai-java/capped-fetch.svg?lang=en)](https://gitnova.dev/en/r/agentscope-ai-java/capped-fetch)

More in this category

6.6
derv82/wifit3
Cross-platform USB Wi-Fi auditor in Python: scans networks, captures WPA handshakes and PMKIDs, attacks WPS and WEP via its own userland drivers without aircrack-ng.

Early signalSecurityPython+0 stars today, ≈ 244 by evening
6.1
jamespolyakov9829/captcha-api
Dependency-free Python client and CLI for the Clearance captcha-solving API: one interface for Cloudflare Challenge and Turnstile with cost tracking and concurrent batch solves.

Early signalSecurityPython+0 stars today, ≈ 103 by evening
5.8
openbao/openbao
OpenBao is an open-source secrets management system for storing, encrypting, and distributing credentials, keys, and certificates, with dynamic secrets and auditing. A community-governed fork of Vault.

BreakoutSecurityGo+0 stars today, ≈ 203 by evening
5.1
angusdevgo/Seep-Reverse-Lab
Agent-native reverse engineering workbench for binaries and CWE-602 client-side authorization auditing: unifies Radare2, JADX, Apktool, Frida and IDA via 23 MCP tools with automatic task routing.

Early signalSecurityPython+0 stars today, ≈ 66 by evening
5.1
SpecterLouse/CapCut-Pro-macOS-Windows
This repository distributes a "cracked" CapCut Pro: install commands download and execute scripts from external sites, promising unlocked premium features and watermark-free export. It is a typical malware-distribution…

Early signalSecurity+0 stars today, ≈ 144 by evening
4.8
christianrowlands/wavedigger
Web app that looks up the approximate location of Wi-Fi access points by BSSID and LTE/5G NR cell towers by network parameters via Apple's public WLOC API, with map visualization.

Early signalSecurityTypeScript+0 stars today, ≈ 33 by evening