
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@jgalego/teamapi-rest-api
Advanced tools
A read-only Fastify REST API over a resolved
Team API as Code org graph — teams, roles, services,
interactions, dependencies, cognitive load, and diagrams — plus interactive Swagger UI at /docs
and a live browser dashboard at /dashboard (team list, cognitive-load bars, search, and a
client-side-rendered diagram viewer; no separate process or build step).
Normally started via the teamapi serve-api CLI command rather than embedded directly, but it's a
plain Fastify plugin if you want to mount it yourself.
Unauthenticated by design. There is no auth, CORS, or rate limiting — the CLI binds to
127.0.0.1 only, which is the right default for local/dev use. If you embed buildServer
yourself and bind it beyond localhost, put an authenticating reverse proxy in front of it; the
org data this API serves (team structure, cognitive load self-assessments, member names/contacts)
is not something to expose unauthenticated on a shared network.
npm install @jgalego/teamapi-rest-api
import { OrgGraphStore } from "@jgalego/teamapi-core";
import { buildServer } from "@jgalego/teamapi-rest-api";
const store = new OrgGraphStore({ seedUris: [...] });
await store.load();
const app = await buildServer(store, { logger: true });
await app.listen({ port: 3000, host: "127.0.0.1" });
Full docs, endpoint reference, and examples: https://github.com/JGalego/TeamAPI
MIT
FAQs
Read-only REST API over a resolved Team API org graph
We found that @jgalego/teamapi-rest-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.