
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@smithy/core
Advanced tools
This is an internal package. That means this is used as a dependency for other, public packages, but should not be taken directly as a dependency in your application's
package.json.
If you are updating the version of this package, for example to bring in a bug-fix, you should do so by updating your application lockfile with e.g.
npm up @scope/packageor equivalent command in another package manager, rather than taking a direct dependency.
This package provides common or core functionality for generic Smithy clients.
You do not need to explicitly install this package, since it will be installed during code generation if used.
@smithy/core submodulesCore submodules are organized for distribution via the package.json exports field.
exports is supported by default by the latest Node.js, webpack, and esbuild. For react-native, it can be
enabled via instructions found at reactnative.dev/blog, but we also provide a compatibility redirect.
Think of @smithy/core as a mono-package within the monorepo.
It preserves the benefits of modularization, for example to optimize Node.js initialization speed,
while making it easier to have a consistent version of core dependencies, reducing package sprawl when
installing a Smithy runtime client.
index.ts file corresponding to the pattern ./src/submodules/<MODULE_NAME>/index.ts will be
published as a separate dist-cjs bundled submodule index using the Inliner.js build script../src/submodules/<SUBMODULE> including an index.ts file and a README.md file.
package.json and the various tsconfig.json files, but it will automatically fix them if possible.@smithy/<pkg> package in that importing it in Node.js will resolve a separate bundle.@scope/pkg/submodule name as the import.
@smithy/core.
The linter runs during yarn build and also as yarn lint.@smithy/core/submodule vs. @smithy/new-package?Keep in mind that the core package is installed by all downstream clients.
If the component functionality is upstream of multiple clients, it is
a good candidate for a core submodule. For example, if middleware-retry had been written
after the support for submodules was added, it would have been a submodule.
If the component's functionality is downstream of a client (rare), or only expected to be used by a very small subset of clients, it could be written as a standalone package.
FAQs
Unknown package
The npm package @smithy/core receives a total of 68,863,011 weekly downloads. As such, @smithy/core popularity was classified as popular.
We found that @smithy/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.