
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
@frontmcp/di
Advanced tools
Generic dependency injection container and registry utilities for TypeScript applications
Dependency injection container and registry utilities for FrontMCP.
Internal package. Used by
@frontmcp/sdk— most users do not need to install this directly.
npm install @frontmcp/di reflect-metadata zod
IndexedRegistrycreateTokenFactory({ prefix }) for Symbol-based tokensimport 'reflect-metadata';
import { DiContainer, createTokenFactory, ProviderScope } from '@frontmcp/di';
const tokens = createTokenFactory({ prefix: 'MyApp' });
class DatabaseService {
static metadata = { name: 'Database', scope: ProviderScope.GLOBAL };
}
const container = new DiContainer([DatabaseService]);
await container.ready;
const db = container.get(DatabaseService);
| Topic | Link |
|---|---|
| Providers & DI | Providers |
@frontmcp/sdk — consumes DI for server-level injectionApache-2.0 — see LICENSE.
FAQs
Generic dependency injection container and registry utilities for TypeScript applications
We found that @frontmcp/di demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.