
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@cropgraph/core
Advanced tools
CropGraph core library: curated crop calendar (1,000 entries), companion planting relationships, USDA hardiness zone lookup, and climate classification. Offline, zero network calls.
Curated agricultural intelligence as a pure TypeScript library. No network calls, no API keys, no runtime dependencies beyond Zod.
| Asset | Detail |
|---|---|
| Crop calendar | 1,000 entries: 319 vegetables, 186 herbs, 173 fruits, 163 flowers, 59 legumes, 55 cover crops, 45 roots. Frost-anchored planting windows with optional climate modifiers for six climate types. |
| Companion planting | 121 directed relationships: 88 beneficial, 33 antagonist, 12 mechanism categories (nitrogen_fixing, pest_repellent, trap_crop, ...). |
| USDA hardiness zones | 40,283 ZIP-code centroids from PRISM 2023 + waldoj/frostline, with offline lookup by coordinates or ZIP. Frost-date table by zone. |
| Climate types | Six-type classifier (maritime, mediterranean, continental, humid_subtropical, arid, semi_arid) from a coordinate-based heuristic. |
All datasets are validated against JSON Schemas at module load. A malformed
fixture breaks import "@cropgraph/core" immediately rather than at runtime.
npm install @cropgraph/core
import {
getHardinessZone,
getClimateType,
getPlantingPlan,
findCrop,
searchCrops,
getCompanions,
checkCompanionPair,
} from "@cropgraph/core";
// Zone lookup from coords.
const zone = getHardinessZone({ lat: 48.118, lng: -123.43 });
// → { ok: true, data: { zone: "8b", ... } }
// Climate classification from coords.
const climate = getClimateType({ lat: 48.118, lng: -123.43 });
// → { ok: true, data: { climateType: "maritime", ... } }
// Planting plan for a zone.
const plan = getPlantingPlan({ zone: "8b", climateType: "maritime" });
// → { ok: true, data: { plantNow: [ ... ] } }
// Crop lookup.
findCrop("tomato");
searchCrops("squash");
// Companion planting.
getCompanions("tomato"); // 18 entries for tomato
checkCompanionPair("tomato", "basil"); // beneficial
Every entry cites a USDA Cooperative Extension publication or a
peer-reviewed source. See the per-entry source field in
src/data/crop-calendar.json and
src/data/companions.json, and the
file-level descriptions in the matching *.schema.json files for the
methodology rundown.
MIT.
FAQs
CropGraph core library: curated crop calendar (5,006 entries across 14 categories with 120 climate-modified crops across 6 climate types), 1,004 companion planting relationships, 12 rotation families, 102 succession planting chains, 802 pest/disease assoc
The npm package @cropgraph/core receives a total of 86 weekly downloads. As such, @cropgraph/core popularity was classified as not popular.
We found that @cropgraph/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.