
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
@opentag/telegram
Advanced tools
Telegram message normalization and source-thread presentation helpers for OpenTag.
Use this package to normalize Telegram bot messages into OpenTagEvent objects
and to encode or parse Telegram source-thread keys.
pnpm add @opentag/telegram
normalizeTelegramMessage: converts a Telegram message into an OpenTagEvent.encodeTelegramThreadKey: encodes bot, chat, and message coordinates for source-thread delivery.parseTelegramThreadKey: decodes a Telegram source-thread key.renderTelegramAcknowledgement: renders the Telegram acknowledgement body.renderTelegramFinalResult: renders the Telegram final result body.createTelegramSendMessagePayload: creates a Telegram Bot API sendMessage payload.import { normalizeTelegramMessage } from "@opentag/telegram";
const event = normalizeTelegramMessage({
botId: "bot_123",
botUsername: "opentag_bot",
chatId: "456",
chatType: "private",
userId: "789",
username: "alice",
text: "investigate this deploy failure",
messageId: 101,
updateId: 202,
binding: {
botId: "bot_123",
chatId: "456",
repoProvider: "github",
owner: "acme",
repo: "demo"
}
});
if (event) {
// Send the event to @opentag/client or your own OpenTag-compatible control plane.
}
Telegram thread key format is part of the source-thread identity shared by ingress and delivery. A breaking format change must update both sides atomically.
FAQs
Telegram message normalization and callback helpers for OpenTag.
The npm package @opentag/telegram receives a total of 2 weekly downloads. As such, @opentag/telegram popularity was classified as not popular.
We found that @opentag/telegram demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.