
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@arcjet/runtime
Advanced tools
@arcjet/runtimeArcjet runtime detection.
This package attempts to discover and provide runtime keys as defined by the WinterCG.
This is an internal utility to help us figure out what platform we are running on.
It’s a fork of unjs/std-env.
We chose to fork so that we can cut away functionality that we do not use
and keep our dependency tree as light as possible.
We only need the runtime detection.
You should not use this but use unjs/std-env or one of the
alternatives instead.
This package matches our current needs which are likely different from yours.
This package is ESM only. Install with npm in Node.js:
npm install @arcjet/runtime
import { runtime } from "@arcjet/runtime";
console.log(runtime()); // => "bun" or "node" and such
This package exports the identifier
runtime.
There is no default export.
This package exports the TypeScript type Runtime.
RuntimeThis type represents the runtime environments that can be detected.
type Runtime = "workerd" | "deno" | "node" | "bun" | "edge-light" | "";
runtime()Detects which runtime environment your code is currently running in.
The detected runtime (string), or an empty string if the runtime could not
be determined.
Apache License, Version 2.0 © Arcjet Labs, Inc.
Derivative work based on std-env licensed under
MIT © Pooya Parsa.
Our work cherry picks only what we need.
FAQs
Arcjet runtime detection
The npm package @arcjet/runtime receives a total of 65,058 weekly downloads. As such, @arcjet/runtime popularity was classified as popular.
We found that @arcjet/runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.