
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@mastra/evals
Advanced tools
Affected versions:
@mastra/evals ships a collection of scoring utilities you can run locally or inside your own evaluation pipelines. These scorers come in two flavors:
npm install @mastra/evals
Import prebuilt scorers from the package subpath.
import { createToolCallAccuracyScorerCode } from '@mastra/evals/scorers/prebuilt';
const scorer = createToolCallAccuracyScorerCode({ expectedTool: 'weather' });
See the package changelog for version history and release notes.
We have an open community Discord. Come and say hello and let us know if you have any questions or need any help getting things running.
FAQs
Unknown package
The npm package @mastra/evals receives a total of 117,121 weekly downloads. As such, @mastra/evals popularity was classified as popular.
We found that @mastra/evals demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.