
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@mastra/hono
Advanced tools
Affected versions:
Hono server adapter for Mastra, enabling you to run Mastra with the Hono framework.
npm install @mastra/hono hono
import { Hono } from 'hono';
import { HonoBindings, HonoVariables, MastraServer } from '@mastra/hono';
import { mastra } from './mastra';
const app = new Hono<{ Bindings: HonoBindings; Variables: HonoVariables }>();
const server = new MastraServer({ app, mastra });
await server.init();
export default app;
Add routes directly to the Hono app with access to Mastra context:
// Routes added after init() have access to Mastra context
app.get('/health', c => {
const mastraInstance = c.get('mastra');
const agents = Object.keys(mastraInstance.listAgents());
return c.json({ status: 'ok', agents });
});
const server = new MastraServer({
app,
mastra,
prefix: '/api/v2', // Route prefix
openapiPath: '/openapi.json', // OpenAPI spec endpoint
bodyLimitOptions: {
maxSize: 10 * 1024 * 1024, // 10MB
onError: err => ({ error: 'Payload too large' }),
},
streamOptions: { redact: true }, // Redact sensitive data from streams
});
Access these in route handlers via c.get():
| Key | Description |
|---|---|
mastra | Mastra instance |
requestContext | Request context map |
abortSignal | Request cancellation signal |
tools | Available tools |
FAQs
Mastra Hono adapter for the server
The npm package @mastra/hono receives a total of 33,433 weekly downloads. As such, @mastra/hono popularity was classified as popular.
We found that @mastra/hono demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.