
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@tanstack/ai-typesafe
Advanced tools
TypeSafe Jev adapter for TanStack AI — typed evaluate decisions over HTTP.
TypeSafe Jev adapter for TanStack AI. Call Jev with
decide() and typed questions. This package talks HTTP with fetch. It
does not add a TypeSafe SDK.
pnpm add @tanstack/ai @tanstack/ai-typesafe
Get an API key from TypeSafe and set it as an environment variable:
export TYPESAFE_API_KEY="..."
import { boolean, choice, decide, score } from '@tanstack/ai'
import { typesafeDecider } from '@tanstack/ai-typesafe'
const result = await decide({
adapter: typesafeDecider('jev-latest'),
state: ticket,
questions: {
queue: choice({
instructions: 'Which team should handle this ticket?',
options: {
billing: 'Payments, invoices, refunds',
tech: 'Bugs, outages, integrations',
sales: 'Pricing, upgrades, new accounts',
},
}),
urgency: score({
instructions: 'How urgent is this ticket?',
levels: ['low', 'medium', 'high'],
}),
refund: boolean({
instructions: 'Is the customer asking for a refund?',
}),
},
})
result.queue.value
result.meta.model
result.meta.usage
typesafeDecider(model) reads TYPESAFE_API_KEY from the environment. To
pass a key yourself, use createTypesafeDecider(model, apiKey).
jev-latest — current stable Jev aliasjev-1.13.0 — pinned Jev releaseYou can also pass other TypeSafe model ids as a string.
MIT
FAQs
TypeSafe Jev adapter for TanStack AI — typed evaluate decisions over HTTP.
The npm package @tanstack/ai-typesafe receives a total of 618 weekly downloads. As such, @tanstack/ai-typesafe popularity was classified as not popular.
We found that @tanstack/ai-typesafe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.