
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@opentag/client
Advanced tools
HTTP client SDK for creating, claiming, and updating OpenTag dispatcher runs.
HTTP client SDK for talking to an OpenTag dispatcher.
Use this package from ingress apps, admin setup scripts, local daemons, hosted runners, or tests that need to create, claim, update, or inspect OpenTag runs over the dispatcher API.
pnpm add @opentag/client
createOpenTagClient: full dispatcher client for run creation, claiming, progress, completion, and binding management.createDispatcherClient: runner-focused compatibility wrapper used by opentagd.createDispatcherAdminClient: admin-focused compatibility wrapper for runner registration and bindings.OpenTagClient, ClaimedOpenTagRun, RepoBindingInput, RunProgressInput: public TypeScript contracts.import { createOpenTagClient } from "@opentag/client";
const client = createOpenTagClient({
dispatcherUrl: "https://opentag.example.com",
pairingToken: process.env.OPENTAG_DISPATCHER_TOKEN
});
await client.createRun({
runId: `run_${Date.now()}`,
event
});
const claimed = await client.claim({ runnerId: "runner_local" });
if (claimed) {
await client.markRunning({ runId: claimed.run.id, executor: "custom" });
await client.progress({
runId: claimed.run.id,
type: "executor.progress",
message: "Working on the request",
at: new Date().toISOString()
});
await client.complete({
runId: claimed.run.id,
result: { conclusion: "success", summary: "Done" }
});
}
Non-2xx dispatcher responses throw Error values that include the HTTP status and response body excerpt. Treat these messages as diagnostic text, not a stable machine-readable API.
The method names and input object shapes are public API. New fields should be optional by default. Breaking changes follow the repository versioning policy.
FAQs
HTTP client SDK for creating, claiming, and updating OpenTag dispatcher runs.
The npm package @opentag/client receives a total of 36 weekly downloads. As such, @opentag/client popularity was classified as not popular.
We found that @opentag/client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.