
Security News
The Next Open Source Security Race: Triage at Machine Speed
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.
@voiceflow/runtime-client-js
Advanced tools
javascript client SDK for running voiceflow projects anywhere
Web Demo https://voiceflow-burger.webflow.io/

npm install --save @voiceflow/runtime-client-js
First build a project on Voiceflow. Make sure it works by testing it.
Retrieve the versionID from the URL:
https://creator.voiceflow.com/project/{VERSION_ID}/... and initialize the client
const VF = require('@voiceflow/runtime-client-js');
const factory = new VF.RuntimeClientFactory({
versionID: 'XXXXXXXXXXXXXXXXXXXXXXXX', // voiceflow project versionID
endpoint: 'https://general-runtime.voiceflow.com',
});
const client = factory.createClient();
// (optional) start the conversation
client.start().then((context) => {
console.log(context.getResponse());
});
// call this function from any input source
// e.g. interaction('can I have fries with that');
async function interaction(input) {
// get a context for every user interaction
const context = await client.sendText(input);
// print out what the bot says back
console.log(context.getResponse());
if (context.isEnding()) {
console.log('conversation is over');
}
}
Every interaction with the bot yields a conversation context. The context is a snapshot of the conversation at the current stage and contains useful information such as the bot's responses and the state of all the variables in the Voiceflow project, and much more!
.start() method, which returns a context..sendText(), or .sendRequest() and pass in any appropriate data. Each method also returns a context.context.getResponses() is the main conversation data. It is a list of Trace objects that represents the bot's response.
Trace types are filtered out by default, such as block, debug, flow traces. To access the entire trace, use context.getTrace()context.isEnding() is a boolean that is true when the Voiceflow project is done. Make sure to check for this during each interaction.context.getChips() returns an array of suggested responses that the user can say. This is generated based on what is configured in your Voiceflow project.As the name suggests, runtime-client-js interfaces with a Voiceflow "runtime" server. You can check out https://github.com/voiceflow/general-runtime and host your own runtime server. Modifying the runtime allows for extensive customization of bot behavior and integrations.
By default, the client will use the Voiceflow hosted runtime at https://general-runtime.voiceflow.com
FAQs
JavaScript runtime SDK for executing Voiceflow projects
The npm package @voiceflow/runtime-client-js receives a total of 6 weekly downloads. As such, @voiceflow/runtime-client-js popularity was classified as not popular.
We found that @voiceflow/runtime-client-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 27 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Claude Opus 4.6 has uncovered more than 500 open source vulnerabilities, raising new considerations for disclosure, triage, and patching at scale.

Research
/Security News
Malicious dYdX client packages were published to npm and PyPI after a maintainer compromise, enabling wallet credential theft and remote code execution.

Security News
gem.coop is testing registry-level dependency cooldowns to limit exposure during the brief window when malicious gems are most likely to spread.