
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
ai-fallback
Advanced tools
Automatically switch AI SDK model provider when one of the providers has downtime
Automatically switch between AI model providers when one experiences downtime or errors.
[!warning] Version compatibility:
- Use
ai-fallback
version 0 for AI SDK v4.- Use
ai-fallback
version 1 for AI SDK v5 (currently in beta).
AI providers can encounter:
This package ensures reliability by specifying multiple AI models as fallbacks. It automatically switches to the next available model if the primary fails, maintaining application uptime.
npm install ai-fallback@0 # use version 0.x.x for AI sdk v4
Reset to the primary model after a delay (e.g., 1 minute):
const model = createFallback({
models: [
anthropic('claude-3-haiku-20240307'), // Use Claude as preferred model
openai('gpt-3.5-turbo'),
],
onError: (error, modelId) => {
console.error(`Error with model ${modelId}:`, error)
},
modelResetInterval: 60000, // Reset to first model after 1 minute of the first error
})
import { createFallback } from 'ai-fallback'
import { openai } from '@ai-sdk/openai'
import { anthropic } from '@ai-sdk/anthropic'
const model = createFallback({
models: [anthropic('claude-3-haiku-20240307'), openai('gpt-3.5-turbo')],
})
The retryAfterOutput
option allows retrying with a different model even if some tokens were already streamed. This is useful when you want to restart the generation from scratch if an error occurs mid-stream:
import { createFallback } from 'ai-fallback'
import { openai } from '@ai-sdk/openai'
import { anthropic } from '@ai-sdk/anthropic'
import { streamText } from 'ai'
let fullText = ''
const model = createFallback({
models: [anthropic('claude-3-haiku-20240307'), openai('gpt-3.5-turbo')],
retryAfterOutput: true, // Enable retrying even after partial output
onError: (err) => {
console.error('Error:', err)
// reset the full text because error happened when some tokens were already streamed in
fullText = ''
},
})
const stream = await streamText({
model,
system: 'You are a helpful assistant.',
messages: [{ role: 'user', content: 'Write a long story.' }],
})
for await (const chunk of stream.textStream) {
fullText += chunk
console.log('Current text:', fullText)
}
Generate text with automatic fallback:
const result = await generateText({
model,
system: 'You are a helpful assistant.',
messages: [{ role: 'user', content: 'Count from 1 to 5.' }],
})
Stream text responses:
const stream = await streamText({
model,
system: 'You are a helpful assistant.',
messages: [{ role: 'user', content: 'Count from 1 to 5.' }],
})
for await (const chunk of stream.textStream) {
console.log(chunk)
}
Stream typed objects using Zod
schemas:
import { z } from 'zod'
const stream = await streamObject({
model,
system: 'You are a helpful assistant.',
messages: [
{
role: 'user',
content: 'Give me a person object with name and age properties.',
},
],
schema: z.object({
name: z.string(),
age: z.number(),
}),
})
for await (const chunk of stream.partialObjectStream) {
console.log(chunk)
}
FAQs
Automatically switch AI SDK model provider when one of the providers has downtime
The npm package ai-fallback receives a total of 3,407 weekly downloads. As such, ai-fallback popularity was classified as popular.
We found that ai-fallback demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.