
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@pdpp/read-core
Advanced tools
Pure, adapter-agnostic primitives for shaping PDPP read results into bounded previews, continuation descriptors, handle metadata, and escalation paths.
@pdpp/read-core contains pure, adapter-agnostic primitives for shaping PDPP
read results into bounded previews, continuation descriptors, handle metadata,
and deliberate escalation paths.
It is the shared core consumed by independently-installed read adapters
(@pdpp/mcp-server, @pdpp/cli, and future REST/SDK adapters). Given records,
record-sets, or field reads, it returns structured, bounded descriptors that
any adapter can render — the adapter decides how to present them.
In scope — pure read shaping only:
Out of scope — keep these in the adapter or server layers:
The package keeps a deliberately small, stable public API so adapters can build against it safely.
This package does not currently publish declaration files. Its public contract is the emitted JavaScript root export; declarations will be added only with an explicit typed API contract.
FAQs
Pure, adapter-agnostic primitives for shaping PDPP read results into bounded previews, continuation descriptors, handle metadata, and escalation paths.
The npm package @pdpp/read-core receives a total of 72 weekly downloads. As such, @pdpp/read-core popularity was classified as not popular.
We found that @pdpp/read-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.