@hey-api/client-fetch

Registry deprecationdanger

The entire package is deprecated, with the publisher stating that from v0.73.0 it is bundled directly inside @hey-api/openapi-ts; no replacement package is listed. This materially lowers the release's suitability for a new dependency.

Release historycaution

The package has 56 releases since May 2024, but it has had no releases in the last 12 months and its latest release was June 12, 2025. The active repository partly offsets abandonment concerns but not the stale registry release line.

Repo package mentioncaution

The repository name does not match the package and its README does not mention it, creating ownership ambiguity. The name mismatch is compatible with a monorepo sub-package, but the absent README mention leaves a transparency concern.

Repo toolingcaution

The repository uses TypeScript, Vitest, Turbo, and npm scripts, but no security-scanning tools were detected. The build tooling is solid; the missing scanning is a modest hygiene gap.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, though it does not outweigh the stronger maintenance evidence on its own.