vetkit.resilience.http-call-without-timeout.js-axios-create
axios.create builds an HTTP client without a timeout. axios waits indefinitely by default, so a slow or unresponsive upstream keeps each request, and whatever is waiting on it, open forever.
Last updated:
Suite: Production readiness
javascript, typescript
axios.create builds an HTTP client without a timeout. axios waits indefinitely by default, so a slow or unresponsive upstream keeps each request, and whatever is waiting on it, open forever.
Category: RESILIENCE · Engine rule severity: INFO
How to fix it
Set timeout (milliseconds) on the instance, for example axios.create({ baseURL, timeout: 10_000 }), or set axios.defaults.timeout once at startup, and handle ECONNABORTED errors. Long uploads or downloads can override it per request.
References
Source: packages/engine/rules/resilience/javascript.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.