
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@hey-api/spec-types
Advanced tools
📃 TypeScript definitions for OpenAPI and JSON Schema specifications with complete inline documentation.
TypeScript definitions for OpenAPI and JSON Schema specifications with complete inline documentation.
Manual • Issues • Contribute
TypeScript definitions for OpenAPI and JSON Schema specifications with complete inline documentation.
Part of the Hey API ecosystem.
Want to see your code in products used by millions?
Start with our Contributing guide and release your first feature.
Partners behind the future of API tooling. Become a sponsor.
|
|
|
fastapi.tiangolo.com |
getunblocked.com |
|
|
You can download @hey-api/spec-types from npm using your favorite package manager.
npm install @hey-api/spec-types -D -E
pnpm add @hey-api/spec-types -D -E
yarn add @hey-api/spec-types -D -E
bun add @hey-api/spec-types -D
Hover over any property to see its definition from the specification.
import type { OpenAPIV3_1 } from '@hey-api/spec-types';
const doc = {
openapi: '3.1.2',
info: {
title: 'My OpenAPI document',
version: '1.0.0',
},
} satisfies OpenAPIV3_1.Document;
Full type coverage for Draft 4 and Draft 2020-12 schemas.
import type { JSONSchemaDraft2020_12 } from '@hey-api/spec-types';
const doc = {
properties: {
foo: {
type: 'string',
},
},
type: 'object',
} satisfies JSONSchemaDraft2020_12.Document;
Released under the MIT License.
FAQs
📃 TypeScript definitions for OpenAPI and JSON Schema specifications with complete inline documentation.
The npm package @hey-api/spec-types receives a total of 1,639,867 weekly downloads. As such, @hey-api/spec-types popularity was classified as popular.
We found that @hey-api/spec-types demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.