
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@connectrpc/connect-web
Advanced tools
Connect is a family of libraries for building and consuming APIs on different languages and platforms. [@connectrpc/connect](https://www.npmjs.com/package/@connectrpc/connect) brings type-safe APIs with Protobuf to TypeScript.
Connect is a family of libraries for building and consuming APIs on different languages and platforms. @connectrpc/connect brings type-safe APIs with Protobuf to TypeScript.
@connectrpc/connect-web provides the following adapters for web browsers, and any other platform that has
the fetch API on board:
Lets your clients running in the web browser talk to a server with the Connect protocol:
import { createClient } from "@connectrpc/connect";
+ import { createConnectTransport } from "@connectrpc/connect-web";
import { ElizaService } from "./gen/eliza_connect.js";
+ // A transport for clients using the Connect protocol with fetch()
+ const transport = createConnectTransport({
+ baseUrl: "https://demo.connectrpc.com",
+ });
const client = createClient(ElizaService, transport);
const { sentence } = await client.say({ sentence: "I feel happy." });
console.log(sentence) // you said: I feel happy.
Lets your clients running in the web browser talk to a server with the gRPC-web protocol:
import { createClient } from "@connectrpc/connect";
+ import { createGrpcWebTransport } from "@connectrpc/connect-web";
import { ElizaService } from "./gen/eliza_connect.js";
+ // A transport for clients using the Connect protocol with fetch()
+ const transport = createGrpcWebTransport({
+ baseUrl: "https://demo.connectrpc.com",
+ });
const client = createClient(ElizaService, transport);
const { sentence } = await client.say({ sentence: "I feel happy." });
console.log(sentence) // you said: I feel happy.
To get started with Connect, head over to the docs for a tutorial, or take a look at our example.
Connect plays nice with Vue, Svelte, Remix, Next.js, Angular and many others. Take a look at our examples for various frameworks.
grpc-web is a JavaScript implementation of gRPC for web clients. It provides similar functionality to @connectrpc/connect-web, allowing web applications to communicate with gRPC services. However, grpc-web is more established and widely used, whereas @connectrpc/connect-web may offer a more modern or streamlined API.
grpc is the official Node.js library for gRPC, primarily used for server-side applications. While it supports full gRPC functionality, it does not directly support gRPC-web, which is specifically designed for web clients. @connectrpc/connect-web is tailored for web environments, making it more suitable for client-side use.
FAQs
Connect is a family of libraries for building and consuming APIs on different languages and platforms. [@connectrpc/connect](https://www.npmjs.com/package/@connectrpc/connect) brings type-safe APIs with Protobuf to TypeScript.
The npm package @connectrpc/connect-web receives a total of 1,659,471 weekly downloads. As such, @connectrpc/connect-web popularity was classified as popular.
We found that @connectrpc/connect-web demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.