
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
@felixgeelhaar/glossa-sdk
Advanced tools
HTTP fetch + in-memory bundle cache + SSE subscription for Glossa. Framework-agnostic; runs in Node and browsers.
@felixgeelhaar/glossa-sdkFramework-agnostic HTTP client + in-memory bundle cache + SSE subscription for Glossa. Runs in Node and browsers. ~400 LOC, ~10 KB unpacked, zero non-stdlib deps.
pnpm add @felixgeelhaar/glossa-sdk
import { createClient } from "@felixgeelhaar/glossa-sdk";
const client = createClient({
apiUrl: "https://glossa.example.com/api/v1",
apiKey: "glossa_...",
project: "brotwerk-site",
});
const bundle = await client.bundle("de");
// → { locale: "de", messages: { "hero.title": "Brotwerk", ... }, etag: "..." }
ETag-aware: the second call sends If-None-Match: <etag> and returns the cached copy on 304 without re-parsing.
const sub = client.subscribe("de", {
onUpdate(event) {
// { type: "translation.updated", key, value, status }
console.log(event.key, "→", event.value);
},
onError(err) {
console.warn("SSE disconnected:", err);
},
});
// Later:
sub.close();
Each SSE event surgically patches the in-memory cache for that key — no bundle refetch. Reconnects with exponential backoff on transient errors.
await client.scan({
keys: [
{ key: "hero.title", description: "Landing hero" },
{ key: "hero.cta_primary" },
],
});
Used by @felixgeelhaar/glossa-cli to seed keys discovered in source files.
@felixgeelhaar/glossa-elements@felixgeelhaar/glossa-format@felixgeelhaar/glossa-cliMIT
FAQs
HTTP fetch + in-memory bundle cache + SSE subscription for Glossa. Framework-agnostic; runs in Node and browsers.
We found that @felixgeelhaar/glossa-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.