
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@cratestack/runtime-fetch
Advanced tools
A typeof-fetch-compatible transport for CrateStack's generated TypeScript RPC client, adding an optional per-call timeout on top of the global fetch.
A typeof fetch-compatible transport for CrateStack's generated TypeScript RPC client
(transport rpc schemas). With no options it's byte-identical to the global fetch; its only
behavior is an optional per-call timeoutMs.
React Native compatibility evidence is tracked in
docs/react-native-compatibility.md.
import { createFetchRuntime } from "@cratestack/runtime-fetch";
import { CratestackRpcRuntime } from "./generated/runtime"; // your project's generated client
const runtime = new CratestackRpcRuntime("https://api.example.com", {
fetch: createFetchRuntime({ timeoutMs: 10_000 }),
});
A timeout fires an AbortSignal.timeout-style abort; if the call already carries its own
AbortSignal (e.g. CratestackRpcCallOptions.signal), either one aborting cancels the request —
neither overrides the other.
FAQs
A typeof-fetch-compatible transport for CrateStack's generated TypeScript RPC client, adding an optional per-call timeout on top of the global fetch.
The npm package @cratestack/runtime-fetch receives a total of 24 weekly downloads. As such, @cratestack/runtime-fetch popularity was classified as not popular.
We found that @cratestack/runtime-fetch demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.