
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@opentag/discord
Advanced tools
Discord interactions normalization and presentation rendering for OpenTag.
Turns a Discord /opentag slash-command interaction into an OpenTagEvent,
verifies the Ed25519 request signature, and renders acknowledgement / progress
/ final presentations. The interactions app is a Hono application meant to be
mounted into the OpenTag dispatcher process (see
@opentag/local-runtime), mirroring the GitLab webhook ingress.
verifyDiscordSignature — Ed25519 verification over timestamp + rawBody
(uses node:crypto, no third-party dependency).normalizeDiscordInteraction — APPLICATION_COMMAND → OpenTagEvent.encodeDiscordThreadKey / parseDiscordThreadKey — guildId|channelId|anchorId.renderDiscord* / createDiscordSendMessagePayload — presentation rendering.createDiscordInteractionsApp — Hono app handling PING / signature / command.Slash-command MVP (Interactions Webhook route). The @mention (Gateway) route
is not implemented in this slice.
FAQs
Discord interactions normalization and callback rendering for OpenTag.
We found that @opentag/discord demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.