
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@trigguard/gateway-client
Advanced tools
Official Node.js (18+) client for the TrigGuard execution gateway — a thin fetch-based wrapper around POST /execute.
npm install @trigguard/gateway-client
npm install file:./sdk/node
const { Client } = require("@trigguard/gateway-client");
const client = new Client({
apiKey: process.env.TG_API_KEY, // e.g. tg_live_... from control plane
baseUrl: "https://your-gateway.example.com", // or http://127.0.0.1:8080
});
const result = await client.execute({
surface: "spendCommit",
signals: { riskScore: 0.9 },
context: { amount: 1000 },
});
console.log(result.decision, result.execution_id, result.receipt);
Authorization: Bearer <apiKey>TrigGuardError on non-2xx (includes status, body, request_id when present)cd /path/to/TrigGuard/sdk/node
npm login
npm run publish:npm
PyPI (Python package): run from repo root, not from sdk/node: bash scripts/publish-pypi.sh (see sdk/python/README.md).
sdk/js/trigguard (@trigguard/sdk in that tree)FAQs
TrigGuard Gateway Client
We found that @trigguard/gateway-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.