
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@ecosy/core
Advanced tools
A modular, tree-shakable collection of essential utilities, serialization primitives, and event-driven patterns for modern TypeScript applications
A modular, tree-shakable collection of essential utilities, serialization primitives, and event-driven patterns for modern TypeScript applications.
yarn add @ecosy/core
| Entry point | Description |
|---|---|
@ecosy/core | Re-exports all modules |
@ecosy/core/types | TypeScript type utilities |
@ecosy/core/utilities | Runtime utility functions |
@ecosy/core/subscriber | Pub/sub event emitter with state |
@ecosy/core/http | HTTP client with interceptors and upload |
@ecosy/core/logger | Structured logger with log levels |
@ecosy/core/syhemo | System health monitor |
@ecosy/core/serialize | Serialization engine (JSON, URL, queryString) |
@ecosy/core/slugify | Unicode-safe string slugifier |
@ecosy/core/searchify | Diacritic-insensitive fuzzy search |
Deep utility types for TypeScript — Freezable<T>, PartialLiteral<T>, Promisable<V>, ToString<T>, and more.
clone — Deep clone with circular reference handlingfreeze — Deep freeze via clone + Object.freezeisEqual — Structural deep equality (Date, Map, Set, TypedArrays)merge — Deep merge with prototype pollution protectionflatten / flattenToArray — Object flatteningget — Safe deep path resolution ("a.b[0].c")defer / deferAsync — rAF + setTimeout scheduling with cancelisFunction, isObject, isLiteralObject, isComplexObject, isObjectable, hasOwnPropertyPub/sub event emitter with built-in state management, async once, and typed wiring.
Configurable HTTP client with request/response interceptors, auth token injection, URL interpolation via Serialize, and XHR-based upload with progress tracking.
Centralized serialization engine:
Serialize.Primitive — Type guards and deep normalization (BigInt, Date, undefined stripping)Serialize.JSON — Safe stringify/parse that never throwsSerialize.URL — Robust encode/decode with :param URL buildingSerialize.queryString — Advanced parse/stringify (bracket, index, comma formats)slugify — Unicode-safe slug generation with custom transformer mapsearchify — Diacritic-insensitive fuzzy search using sliding window algorithmFull API reference and guides: docs.ecosy.io
| Package | Description |
|---|---|
@ecosy/datekit | Headless date utilities (Dateify, Dayify, Monthify, Yearify) |
@ecosy/mailer | Email engine with template formatting, retry, and rate limiting |
@ecosy/store | State management with slices and reducers |
@ecosy/react | React hooks for @ecosy/store |
MIT
FAQs
A modular, tree-shakable collection of essential utilities, serialization primitives, and event-driven patterns for modern TypeScript applications
We found that @ecosy/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.