
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
@npms/queries
Advanced tools
Module that offers a variety of queries around npms data.
$ npm install @npms/queries
For now, only queries related to search are available. Though, the goal of this module is to provide other interesting queries in the near future, such as top ranked modules, top authors, etc.
Performs a search query.
Besides normal text, q supports qualifiers to express filters and other modifiers.
The esClient accepts a elasticsearch instance or a config to instantiate it.
You may read the API docs to know which qualifiers are available.
const queries = require('@npms/queries');
// ...
queries.search('test framework', esClient);
.then((res) => {
console.log('total', res.total);
console.log('results', res.results);
});
Available options:
from: The offset in which to start searching from, defaults to 0size: The total number of results to return, defaults to 25throwOnInvalid: Whether to reject the promise if the query has invalid qualifiers or not, defaults to false (if false, invalid qualifiers will be removed from q)Fetch search suggestions to be typically displayed when doing autocomplete.
Only normal text is supported in q but any qualifiers will be automatically discarded.
The esClient accepts a elasticsearch instance or a config to instantiate it.
const queries = require('@npms/queries');
// ...
queries.search.suggestions('gulp', esClient)
.then((suggestions) => console.log('suggestions', suggestions));
Available options:
size: The total number of results to return, defaults to 25$ npm test
$ npm test-cov to get coverage report
Released under the MIT License.
FAQs
Module that offers a variety of queries around npms data
The npm package @npms/queries receives a total of 4 weekly downloads. As such, @npms/queries popularity was classified as not popular.
We found that @npms/queries demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.