
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@kosmic/koa
Advanced tools
@kosmic/koa
is a typescript first drop in replacement for koa. There are virtually 0 differences in the js code base and tests are run against the original koa
tests as well as additional tests to ensure that @kosmic/koa
is 100% production ready and directly compatible with the latest version of koa
. Koa is very stable and is only updated infrequently, but we use github actions to closely track any changes that may occur.
In addition, it is very easy to use @kosmic/koa
with any third party types as well, and no breaking changes should occur, at all, ever.
Wait! If you use ts-server (ie, most code editors are using this), you can immediately benefit from awesome intellisense, even in pure JavaScript!! Once again, never check the docs again for you Koa questions, its right there in your editor!
Remove both koa
and @types/koa
from your package.json and then install @kosmic/koa
and alias it to koa
.
npm install @kosmic/koa@npm:koa
or
yarn add @kosmic/koa@npm:koa
or
pnpm add @kosmic/koa@npm:koa
Thats it!
You will now experience Koa with all the power of typescript built in.
@kosmic/koa
mimics the types in @types/koa
, however, they are not compatible. Third party types can extend them both the same way. In this way, if you want to use any existing koa module with third party types, you can easily do so, but your project needs to alias @kosmic/koa
as koa
.
This aliasing tends to work out of the box if you are using npm
as a package manager, however, yarn
and pnpm
may require some extra configuration. The main ideas is that your project should see and use @kosmic/koa
anywhere it tries to use koa
.
FAQs
Typescript first drop in replacement for koa
We found that @kosmic/koa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.