Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@kosmic/koa
Advanced tools
@kosmic/koa
is a typescript first drop in replacement for koa. There are virtually 0 differences in the js code base and tests are run against the original koa
tests as well as additional tests to ensure that @kosmic/koa
is 100% production ready and directly compatible with the latest version of koa
. Koa is very stable and is only updated infrequently, but we use github actions to closely track any changes that may occur.
In addition, it is very easy to use @kosmic/koa
with any third party types as well, and no breaking changes should occur, at all, ever.
Wait! If you use ts-server (ie, most code editors are using this), you can immediately benefit from awesome intellisense, even in pure JavaScript!! Once again, never check the docs again for you Koa questions, its right there in your editor!
Remove both koa
and @types/koa
from your package.json and then install @kosmic/koa
and alias it to koa
.
npm install @kosmic/koa@npm:koa
or
yarn add @kosmic/koa@npm:koa
or
pnpm add @kosmic/koa@npm:koa
Thats it!
You will now experience Koa with all the power of typescript built in.
@kosmic/koa
mimics the types in @types/koa
, however, they are not compatible. Third party types can extend them both the same way. In this way, if you want to use any existing koa module with third party types, you can easily do so, but your project needs to alias @kosmic/koa
as koa
.
This aliasing tends to work out of the box if you are using npm
as a package manager, however, yarn
and pnpm
may require some extra configuration. The main ideas is that your project should see and use @kosmic/koa
anywhere it tries to use koa
.
FAQs
Typescript first drop in replacement for koa
The npm package @kosmic/koa receives a total of 3 weekly downloads. As such, @kosmic/koa popularity was classified as not popular.
We found that @kosmic/koa demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.