
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@simple-api/core
Advanced tools
The high-performance, framework-agnostic engine powering simple-api.
@simple-api/core is a production-grade API client builder designed for high-scale TypeScript applications. It provides a service-oriented architecture, built-in request deduplication, a powerful tiered middleware system, and automatic parameter injection.
onRequest, onResponse, and onError.multipart/form-data.ApiError class with status codes and full response bodies.AbortController support.GET requests.npm install @simple-api/core
import { createApi } from "@simple-api/core";
export const api = createApi({
baseUrl: "https://api.example.com",
services: {
users: {
get: { method: "GET", path: "/users/:id" },
update: { method: "PATCH", path: "/users/:id" },
},
},
});
// Path parameters and types are automatically handled
const user = await api.users.get({ params: { id: "123" } });
// File uploads made easy
await api.users.update({
params: { id: "123" },
upload: true,
body: { avatar: fileInput.files[0] },
});
Interceptors fire at specific execution points, regardless of your middleware stack.
const api = createApi({
interceptors: {
onRequest: (ctx) => {
console.log(`Starting ${ctx.service}.${ctx.endpoint}`);
return ctx.options;
},
onResponse: (data) => data.payload ?? data,
},
...
});
import { createCacheMiddleware } from "@simple-api/core";
const api = createApi({
middleware: [createCacheMiddleware({ swr: true, ttl: 3600000 })],
...
});
// Re-fetch automatically every 5 seconds
api.users.list({ pollingInterval: 5000 });
SimpleAPI uses a Koa-style async (context, next) middleware system.
When a request fails, the engine throws an ApiError.
import { ApiError } from "@simple-api/core";
try {
await api.users.get({ params: { id: "999" } });
} catch (error) {
if (error instanceof ApiError) {
console.error(error.status, error.data);
}
}
MIT © Elnatan Samuel
FAQs
Framework-agnostic fetch-based API engine
We found that @simple-api/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.