
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@rnaga/wp-node
Advanced tools
π **[View Full Documentation at rnaga.github.io/wp-node β](https://rnaga.github.io/wp-node/)**
π View Full Documentation at rnaga.github.io/wp-node β
WP-Node is a Node.js project written in TypeScript that mirrors the WordPress database schema and functionality. It enables developers to build scalable, modern backends on top of existing WordPress data.
Key benefits include:
posts, users, terms, etc.)PostUtil, TermUtil, and MetaUtil, enabling clean separation of concerns and easier testingdo_action, apply_filters), and supports implementation as async-compatible functionsWP-Node is ideal for scenarios where you need direct access to WordPress database without relying on the full WordPress stack. Example use cases include:
WP-Node Core is designed specifically to interact with the WordPress database. It does not support traditional WordPress features such as:
Its scope is intentionally limited to providing a type-safe, programmatic interface to WordPress data β not replicating the full behavior of the WordPress runtime.
>=22.0.0To spin up a sample environment with WordPress and database in Docker:
docker network inspect wpnet >/dev/null 2>&1 || docker network create wpnet && \
docker run -d --name wpdb --network wpnet -p 33306:3306 \
-e MYSQL_ROOT_PASSWORD=example \
-e MYSQL_DATABASE=wordpress \
-e MYSQL_USER=wp \
-e MYSQL_PASSWORD=wp \
mariadb && \
docker run -d --name wp --network wpnet -p 8080:80 \
-e WORDPRESS_DB_HOST=wpdb:3306 \
-e WORDPRESS_DB_USER=wp \
-e WORDPRESS_DB_PASSWORD=wp \
-e WORDPRESS_DB_NAME=wordpress \
wordpress
Create your config:
npx @rnaga/wp-node-cli -- config
It will prompt for database settings and generate:
_wp/
βββ config/wp.json
.env
You can configure additional settings such as:
staticAssetsPath: Path for media referencesmultisite.enabled: Enable or disable multisite supportInstall CLI tools:
npm i -S @rnaga/wp-node-cli -- -h
Basic command to list posts:
npx @rnaga/wp-node-cli -- post list
Develop your own commands using decorators:
@command("page", { description: "Page commands" })
export class PageCli extends Cli {
@subcommand("list", { description: "List pages" })
async list() {
const context = await Application.getContext();
const posts = await context.postUtil.findByType("page");
console.log(posts);
}
}
WP-Node uses a custom @component() decorator to support DI scopes:
@component({ scope: Scope.Transient })
export class Post {
constructor(
public meta: Meta,
private logger: Logger,
private queryUtil: QueryUtil,
...
) {}
}
apply_filters)do_action equivalent)Feel free to fork, open issues, or suggest improvements. This project is in active development.
MIT License.
FAQs
π **[View Full Documentation at rnaga.github.io/wp-node β](https://rnaga.github.io/wp-node/)**
The npm package @rnaga/wp-node receives a total of 15 weekly downloads. As such, @rnaga/wp-node popularity was classified as not popular.
We found that @rnaga/wp-node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Β It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.