
Company News
Jerod Santo Joins Socket as Head of Media
Allow myself to introduce... myself.
@homespunapps/core
Advanced tools
Homespun relay client: typed HTTP + WebSocket operations against a Homespun relay. Framework-free.
Typed client for the Homespun relay HTTP + WebSocket API. Framework-free: no argv, no MCP, no server dependencies — just the relay protocol expressed as typed operations.
@homespunapps/core targets the Node.js runtime (>= 20, as declared in
package.json's engines). It is framework-free, not runtime-free.
The WebSocket transport (openStream) uses the ws
package rather than the global WebSocket. ws exposes a Node-style event API
(socket.on("message", ...), custom upgrade headers such as Authorization)
that the browser WebSocket does not, and the relay protocol relies on it.
Because of this, @homespunapps/core is not intended to run in a browser or other
non-Node runtime as-is.
The HTTP app (HomespunClient, registerAgent) uses the standard fetch API
and is runtime-agnostic; only openStream carries the Node constraint.
If you need a browser client, treat that as separate future work — it would
need a ws-vs-global-WebSocket abstraction rather than the unconditional
import { WebSocket } from "ws" used today.
HomespunClient / HomespunApiError — typed HTTP operations against a relay.openStream — WebSocket stream (replay-on-connect, then live). Node only.registerAgent — agent registration helper.feedbackTypeSchema, submitFeedbackSchema — Zod schemas for the feedback API.FAQs
Homespun relay client: typed HTTP + WebSocket operations against a Homespun relay. Framework-free.
The npm package @homespunapps/core receives a total of 1,211 weekly downloads. As such, @homespunapps/core popularity was classified as popular.
We found that @homespunapps/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.