
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@buildinternet/releases-api-types
Advanced tools
Wire protocol — request/response types for the Releases registry API. Shared by web, workers, and clients.
Scope: request/response wire types for the public API worker — types only, zero runtime dependencies. No request logic, no client code, no server handlers.
Wire protocol types for the Releases registry API.
Pure TypeScript types — zero runtime dependencies — describing request/response
shapes for the public HTTP API served at api.releases.sh. Consumed by the web
frontend, the remote MCP server, and the Releases CLI.
npm install @buildinternet/releases-api-types
import type { OrgListResponse } from "@buildinternet/releases-api-types";
async function listOrgs(): Promise<OrgListResponse> {
const res = await fetch("https://api.releases.sh/v1/orgs");
if (!res.ok) throw new Error(`API error: ${res.status}`);
return (await res.json()) as OrgListResponse;
}
Paginated list endpoints return a ListResponse<T> envelope ({ items, pagination }). The shared pagination semantics also live in
@buildinternet/releases-core/cli-contracts for CLI callers.
This package follows semantic versioning against the api.releases.sh wire
contract. Additive changes (new optional fields, new types) bump the minor
version. Renames and removals get a deprecation cycle — the old name remains as
a deprecated alias for one minor version before being removed in the next major.
MIT
FAQs
Wire protocol — request/response types for the Releases registry API. Shared by web, workers, and clients.
The npm package @buildinternet/releases-api-types receives a total of 314 weekly downloads. As such, @buildinternet/releases-api-types popularity was classified as not popular.
We found that @buildinternet/releases-api-types demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.