
Security News
Open VSX Begins Implementing Pre-Publish Security Checks After Repeated Supply Chain Incidents
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.
@denali-js/core
Advanced tools
An opinionated Node framework for building robust JSON APIs
Denali is a tool to help you build and deliver amibitous JSON APIs. It features:
Denali should feel familiar to anyone who has worked with popular MVC frameworks like Rails. But Denali has a slightly unique take on each aspect of the MVC pattern:
Unlike many server frameworks, Denali lets you choose which ORM you'd like to use. ORMs are hard, and the Node ecosystem has multiple competing options, each with it's own strengths and weaknesses. Rather than limiting you to a single "official" ORM, or worse, attempting to roll our own, Denali uses an adapter system to ensure that whatever ORM you bring, it can work with the Denali ecosystem.
Denali's view layer is unique as well. Rather than traditional HTML rendering, Denali's view layer renders JSON. Instead of the usual templates and view classes, we have Serializers instead, which tell Denali how to render the data you supply as a response. The separation of responsibilties ensures you can tweak how your data is structured in your API without having to change any of the logic of your app. Several common formats, including JSON-API, are supported out of the box, and customization is easy.
In Denali, the Action class takes the role of the controller in the application. But rather than a single controller class that responds to many different endpoints, an Action class is responsible for responding to requests against a single endpoint (URL + method) only. The result is powerful - since the Action class directly and completely represents the app's response handler, we can use expressive declarative syntax to succinctly define behaviors.
You can install Denali globally via npm:
$ npm install -g denali denali-cli
Create a new application (run with Node 6.0+):
$ denali new my-api
$ cd my-api
You can use the server command to run your API locally in development mode.
The API server will automatically restart when you make a change:
$ denali server
To learn more, check out the docs or join us on Slack
MIT © Dave Wasmer
FAQs
A batteries-included Node.js API framework
The npm package @denali-js/core receives a total of 15 weekly downloads. As such, @denali-js/core popularity was classified as not popular.
We found that @denali-js/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Following multiple malicious extension incidents, Open VSX outlines new safeguards designed to catch risky uploads earlier.

Research
/Security News
Threat actors compromised four oorzc Open VSX extensions with more than 22,000 downloads, pushing malicious versions that install a staged loader, evade Russian-locale systems, pull C2 from Solana memos, and steal macOS credentials and wallets.

Security News
Lodash 4.17.23 marks a security reset, with maintainers rebuilding governance and infrastructure to support long-term, sustainable maintenance.