
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
@galaxy-stack/orbit-devtools
Advanced tools
Developer tools dashboard for Orbit - routes, DI graph, real-time metrics
Developer dashboard for the Orbit framework — live routes, DI graph, module map and request metrics in a browser panel.
bun add @galaxy-stack/orbit-devtools
import { createDevtools } from '@galaxy-stack/orbit-devtools';
import { DevtoolsDashboard } from '@galaxy-stack/orbit-devtools';
const dashboard = createDevtools({
title: 'My App Devtools',
port: 9229,
path: '/__devtools',
theme: 'dark',
auth: { enabled: true, username: 'dev', password: 'secret' },
refreshInterval: 1000,
});
// feed it live data from your app
dashboard.setRoutes(routes); // method, path, controller, handler
dashboard.setProviders(providers); // name, scope, dependencies, module
dashboard.setModules(modules); // controllers, providers, imports, exports
dashboard.pushMetrics({
requestsPerSecond: 120,
avgLatency: 2.5,
errorRate: 0,
activeConnections: 8,
memoryUsage: process.memoryUsage().heapUsed,
cpuUsage: 0.1,
});
// serve over HTTP — HTML dashboard + JSON data endpoint
Bun.serve({
port: 9229,
fetch: dashboard.createHandler(),
});
GET /__devtools/api/data returns the full dashboard data for external tooling${path}/api/data every refreshInterval ms.FAQs
Developer tools dashboard for Orbit - routes, DI graph, real-time metrics
The npm package @galaxy-stack/orbit-devtools receives a total of 2,322 weekly downloads. As such, @galaxy-stack/orbit-devtools popularity was classified as popular.
We found that @galaxy-stack/orbit-devtools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.