# Is sindresorhus/ky safe? Code check by OpenYard

Repository: https://github.com/sindresorhus/ky
Page: https://openyard.cloud/check/sindresorhus/ky

Verdict: No signs of malware or supply-chain tricks.
Checked 2026-11-10 at commit 3541888 by vetcode 0.3.1, reading 114 files without running anything.

What the code can do:
- Reads secrets or environment variables (3 files)
- Connects to the internet (34 files)

These are patterns, not proof. Vulnerability candidates and leaked-secret locations are not published.

To review it more deeply, install the vetcode skill in an AI coding agent (npx skills add openyard-cloud/vetcode) and ask it to review https://github.com/sindresorhus/ky.