
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@opentag/github
Advanced tools
GitHub adapter helpers for OpenTag.
Use this package to turn GitHub comments into OpenTagEvent objects and to render GitHub-friendly callback text.
pnpm add @opentag/github
normalizeGitHubIssueComment: converts an issue comment payload shape into an OpenTagEvent.normalizeGitHubPullRequestReviewComment: converts a PR review comment payload shape into an OpenTagEvent.renderAcknowledgement, renderProgress, renderFinalResult: markdown text helpers for GitHub callbacks.createPullRequest: low-level GitHub REST helper for opening PRs from runner-created branches.import { normalizeGitHubIssueComment } from "@opentag/github";
const event = normalizeGitHubIssueComment({
id: String(payload.comment.id),
commentBody: payload.comment.body,
commentUrl: payload.comment.html_url,
apiCommentsUrl: payload.issue.comments_url,
issueUrl: payload.issue.html_url,
issueNumber: payload.issue.number,
owner: payload.repository.owner.login,
repo: payload.repository.name,
actorId: payload.sender.id,
actorLogin: payload.sender.login,
private: payload.repository.private,
receivedAt: new Date().toISOString()
});
if (event) {
// Send event to @opentag/client or your own OpenTag-compatible control plane.
}
fix and run commands receive write-capable permissions such as repo:write and pr:create. Review, explain, and investigate-style commands stay read/comment oriented.
Normalizer input shapes are intentionally small and provider-specific. Prefer adding optional fields over changing existing fields.
FAQs
GitHub event normalization and callback rendering for OpenTag.
The npm package @opentag/github receives a total of 5 weekly downloads. As such, @opentag/github popularity was classified as not popular.
We found that @opentag/github demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.