
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@ariestools/actor
Advanced tools
Environment-agnostic Actor base class with lifecycle, timers, readiness, and optional telemetry
The Actor base class — the extracted XL1 ActorV3 pattern, merged with the
dapp-core AbstractActor improvements — plus supervision helpers. Compiles
neutral (browser + node + any JS runtime).
Actor — create/start/stop lifecycle (AbstractCreatable), non-overlapping
interval timers with firstRun: 'immediate' | 'deferred' phasing, readiness
warm pass (readyHandler / runReadyHandler / whenReady), abort signal per
start cycle, memoized shutdown() rollback, and no-op-safe OpenTelemetry
instrument helpers (counter / gauge / histogram / upDownCounter /
span / spanAsync)Orchestrator — parallel/dynamic actor supervision (from xyo-chain), with a
structural readiness guard instead of an instanceof gatebootActors — sequential create → start → warm-pass boot with rollbackstopOrShutdown — stop with shutdown() fallbackcreateMemoryLocator — Map-backed InstanceLocator for tests, browser boot,
and locator-less consumerscreateDeferred — rejection-sink-attached deferredActor structurally satisfies @ariestools/cli-kit's ManagedActor contract;
a type-level conformance spec (cli-kit as devDependency) locks that in.
FAQs
Environment-agnostic Actor base class with lifecycle, timers, readiness, and optional telemetry
The npm package @ariestools/actor receives a total of 1,324 weekly downloads. As such, @ariestools/actor popularity was classified as popular.
We found that @ariestools/actor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.