
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@buildinternet/releases-core
Advanced tools
Pure helpers shared by the Releases registry — schema, categories, slicing, IDs, slugs, tokens.
Scope: pure, runtime-neutral helpers shared by this monorepo and the OSS CLI — schema, categories, dates, slicing, IDs/slugs, tokens, CLI contracts. Nothing DB-coupled beyond schema definitions and nothing worker-only lives here — that goes in core-internal.
Pure helpers shared by the Releases registry and the Releases CLI — schema, categories, slicing, IDs, slugs, tokens, CLI contracts.
Imported as @buildinternet/releases-core/<subpath>.
| Subpath | Purpose |
|---|---|
schema | Drizzle ORM table definitions (source of truth for the Releases D1 database). |
categories | Canonical category list, validation, and alias resolution (resolveCategorySlug, parseCategoryAliases). |
dates | Date cutoffs and helpers. |
changelog-range | Pure range parsing. |
changelog-slice | Token-aware CHANGELOG slicing. |
overview | Overview staleness + preview helpers. |
id | Prefixed nanoid generators and entity-type lookup. |
slug | Slug generation. |
tokens | Token counting (tiktoken-backed). |
cli-contracts | Shared --json envelope types for the CLI. |
d1-limits | Backend capability constants (D1_MAX_BINDINGS, IN_ARRAY_CHUNK_SIZE) for single-column IN chunking. |
Published from the buildinternet/releases monorepo. The upstream packages/core/ directory is the single source of truth; both the monorepo and the OSS CLI consume this package from npm.
DB-coupled and worker-only helpers (release upsert, hashing, webhook signing) live in the monorepo under @releases/core-internal and are not published.
FAQs
Pure helpers shared by the Releases registry — schema, categories, slicing, IDs, slugs, tokens.
The npm package @buildinternet/releases-core receives a total of 36 weekly downloads. As such, @buildinternet/releases-core popularity was classified as not popular.
We found that @buildinternet/releases-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.