
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@aippy/runtime
Advanced tools
Runtime SDK for Aippy projects providing device functionality, platform detection, and utility functions.
npm install @aippy/runtime
import { AippyConfig, mergeConfig } from '@aippy/runtime/core';
const config = mergeConfig({
debug: true,
apiBaseUrl: 'https://api.example.com'
});
import { camera, geolocation, sensors, fileSystem } from '@aippy/runtime/device';
// Camera
const stream = await camera.getStream();
const photo = await camera.capturePhoto({ quality: 'high' });
// Geolocation
const position = await geolocation.getCurrentPosition();
const watchId = geolocation.watchPosition((pos) => {
console.log('Position:', pos);
});
// Sensors
const orientation = await sensors.getOrientation();
const cleanup = sensors.watchOrientation((data) => {
console.log('Orientation:', data);
});
// File System
const files = await fileSystem.openFile({ multiple: true });
await fileSystem.saveFile(blob, 'filename.txt');
import { platform, performanceMonitor, pwa } from '@aippy/runtime/utils';
// Platform detection
const info = platform.getPlatformInfo();
const capabilities = platform.getCapabilities();
// Performance monitoring
const metrics = await performanceMonitor.getCoreWebVitals();
const timing = performanceMonitor.getNavigationTiming();
// PWA utilities
const pwaInfo = pwa.getPWAInfo();
await pwa.registerServiceWorker('/sw.js');
await pwa.sendNotification('Hello!');
import { patchAudioContext } from '@aippy/runtime/audio';
// Create and patch AudioContext to bypass iOS silent mode
const ctx = new AudioContext();
const patchedCtx = patchAudioContext(ctx);
// Unlock audio on user interaction (required on iOS)
button.onclick = async () => {
await patchedCtx.unlock();
// Use native Web Audio API as normal
const osc = patchedCtx.createOscillator();
osc.connect(patchedCtx.destination);
osc.start();
osc.stop(patchedCtx.currentTime + 1);
};
// Default base URL: https://api.aippy.dev/api/aisdk/v1
import { streamText, experimental_generateImage as generateImage } from 'ai';
import { aippyAIProvider } from '@aippy/runtime/ai';
// Create provider (reads from env vars automatically)
const provider = aippyAIProvider();
// Or override with config
// const provider = aippyAIProvider({ baseUrl: '...', userToken: '...' });
// Streaming text generation (uses Vercel AI SDK)
const result = await streamText({
model: provider('gpt'),
prompt: 'Write a haiku about TypeScript.',
});
for await (const chunk of result.textStream) {
console.log(chunk);
}
// Image generation
const image = await generateImage({
model: provider.image('dall-e-3'),
prompt: 'A sunset over mountains',
});
console.log(image.image?.base64);
@aippy/runtime/core - Core types and configuration@aippy/runtime/device - Device APIs (camera, geolocation, sensors, file system)@aippy/runtime/utils - Platform detection, performance monitoring, PWA utilities@aippy/runtime/audio - iOS-compatible Web Audio API wrapper@aippy/runtime/ai - AI SDK adapter wrapping ai package, routes through backend proxyThis package is published to the npm public registry. The build process ensures that only compiled JavaScript files and TypeScript declarations are included in the published package - no source code is exposed.
dist/ directory and README.md in the published package# Install dependencies
pnpm install
# Build
pnpm run build
# Type check
pnpm run type-check
# Lint
pnpm run lint
# Format
pnpm run format
# Publish (for maintainers)
pnpm run publish:patch # 0.0.0 -> 0.0.1
pnpm run publish:minor # 0.0.0 -> 0.1.0
pnpm run publish:major # 0.0.0 -> 1.0.0
UNLICENSED - This is a proprietary SDK. All rights reserved.
FAQs
Aippy Runtime SDK - Runtime SDK for Aippy projects
We found that @aippy/runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.