
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@paragraph-com/sdk
Advanced tools
TypeScript SDK for the Paragraph API. Used to interact with Paragraph posts, users, coins, & more.
yarn add @paragraph-com/sdk
import { ParagraphAPI } from "@paragraph-com/sdk";
// For public endpoints
const api = new ParagraphAPI();
const post = await api.posts.get({ id: "postId" });
// For protected endpoints (creating posts, managing subscribers)
const apiWithAuth = new ParagraphAPI({ apiKey: "your-api-key" });
const newPost = await apiWithAuth.posts.create({
title: "My Post",
markdown: "# Hello World",
});
Several endpoints require an API key, which identifies your publication. Pass it when creating the client:
const api = new ParagraphAPI({ apiKey: "your-api-key" });
// Get your publication info
const publication = await api.me.get();
// List your drafts
const { items: drafts } = await api.posts.list({ status: "draft" });
// Update a post
await api.posts.update({
id: "postId",
title: "Updated Title",
markdown: "## New content",
status: "published",
});
// Delete a post
await api.posts.delete({ id: "postId" });
See the API reference for detailed documentation & a playground.
See autogenerated TypeScript docs for all available methods.
FAQs
TypeScript SDK for Paragraph API
The npm package @paragraph-com/sdk receives a total of 142 weekly downloads. As such, @paragraph-com/sdk popularity was classified as not popular.
We found that @paragraph-com/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.