
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@time-provider/plugin-native
Advanced tools
Native JS Date plugin for Time-Provider. Inject time. Control it in tests.
This is the native Date plugin for Time-Provider.
import { createTimeProvider } from "@time-provider/core";
import { createTimeProvider as createDeterministicTimeProvider } from "@time-provider/core/deterministic";
import { plugin } from "@time-provider/plugin-native";
import { plugin as deterministicPlugin } from "@time-provider/plugin-native/deterministic";
// System: real clock and timers. This plugin is UTC-only.
const timeProvider = createTimeProvider.for(plugin).create();
timeProvider.clock.utcNow(); // a native Date
// Deterministic: a simulated clock that only moves when you move it.
using manual = createDeterministicTimeProvider
.for(deterministicPlugin)
.asManual()
.withInitialTime("2026-01-01T00:00:00.000Z")
.create();
manual.clock.moveBy({ hours: 1 });
manual.clock.utcNow(); // 2026-01-01T01:00:00.000Z
JavaScript's native Date object lacks a time zone-aware object type that stores and performs arithmetic in a specific time zone.
As a result, Time-Provider intentionally does not expose time zone or local-time APIs for Date.
This plugin provides a UTC-only facade.
If you need first-class time zone support, consider using Temporal together with the Time-Provider Temporal plugin.
If you need to keep using the native Date object, you can extend it by adding time zone support with the date-fns and date-fns-tz, outside the scope of Time-Provider.
See CHANGELOG.md
FAQs
Native JS Date plugin for Time-Provider. Inject time. Control it in tests.
We found that @time-provider/plugin-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.