
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@supabase/functions-js
Advanced tools
Guides · Reference Docs · TypeDoc
⚠️ Node.js 18 Deprecation Notice
Node.js 18 reached end-of-life on April 30, 2025. As announced in our deprecation notice, support for Node.js 18 was dropped on October 31, 2025.
⚠️ Node.js 20 Deprecation Notice
Node.js 20 reached end-of-life on April 30, 2026. As announced in our deprecation notice, support for Node.js 20 was dropped in v2.110.0.
npm install @supabase/functions-js
import { FunctionsClient } from '@supabase/functions-js'
const functionsUrl = 'https://<project_ref>.supabase.co/functions/v1'
const publishableKey = '<publishable_key>'
const functions = new FunctionsClient(functionsUrl, {
headers: {
Authorization: `Bearer ${publishableKey}`,
},
})
// Invoke a function
const { data, error } = await functions.invoke('hello-world', {
body: { name: 'Functions' },
})
This package is part of the Supabase JavaScript monorepo. To work on this package:
# Complete build (from monorepo root)
pnpm nx build functions-js
# Build with watch mode for development
pnpm nx build functions-js --watch
# Individual build targets
pnpm nx build:main functions-js # CommonJS build (dist/main/)
pnpm nx build:module functions-js # ES Modules build (dist/module/)
# Other useful commands
pnpm nx clean functions-js # Clean build artifacts
pnpm nx typecheck functions-js # TypeScript type checking
pnpm nx docs functions-js # Generate documentation
dist/main/) - For Node.js environmentsdist/module/) - For modern bundlers (Webpack, Vite, Rollup)dist/module/index.d.ts) - Type definitions for TypeScript projectsDocker Required for relay tests. The functions-js tests use testcontainers to spin up a Deno relay server for testing Edge Function invocations.
# Run all tests (from monorepo root)
pnpm nx test functions-js
# Run tests with coverage report
pnpm nx test functions-js --coverage
# Run tests in watch mode during development
pnpm nx test functions-js --watch
# CI test command (runs with coverage)
pnpm nx test:ci functions-js
invoke() method with various optionsWe welcome contributions! Please see our Contributing Guide for details on how to get started.
For major changes or if you're unsure about something, please open an issue first to discuss your proposed changes.
Firebase's JavaScript SDK includes Cloud Functions clients for calling callable functions. Like Supabase's client, it lets application code invoke deployed functions; it is designed for Firebase's callable-function protocol and ecosystem rather than Supabase Edge Functions.
The AWS SDK package can invoke AWS Lambda functions through the AWS API. It serves a similar function of calling deployed serverless code, but uses AWS-specific credentials, configuration, and invocation semantics rather than making Supabase Edge Function requests.
Axios is a general-purpose HTTP client that can send requests to function endpoints. It offers flexible request and response handling, but does not provide Supabase Edge Function-specific invocation behavior or integration.
FAQs
JS SDK to interact with Supabase Functions.
The npm package @supabase/functions-js receives a total of 57,371,478 weekly downloads. As such, @supabase/functions-js popularity was classified as popular.
We found that @supabase/functions-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.