Me and Claude have been working on zfetch (https://github.com/roobie/zfetch), which is a single static binary that fetches URLs over HTTPS with strict security defaults. For many applications, it should be able to replace curl in restricted environments where you need a small, auditable tool with no runtime dependencies.

It should also be usable as a Zig library for embedding HTTP(S) fetches in your own programs.

Vendors and links BoringSSL