
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
assemblerjs
Advanced tools
A modern, type-safe, and lightweight Dependency Injection library for Node.js and Browsers 🌐.
✨ Universal Library: Works seamlessly in Node.js, browsers, and any JavaScript environment that supports ES2020+
reflect-metadataonRegister, onInit, onDisposeParameterDecoratorFactory and createConstructorDecoratorInstall assemblerjs and its peer dependency reflect-metadata using npm or yarn:
npm install assemblerjs reflect-metadata
yarn add assemblerjs reflect-metadata
Important: You must import reflect-metadata at the entry point of your application:
import 'reflect-metadata';
✨ Works everywhere: This installation works for Node.js, browsers (with Vite/Webpack/Rollup), React, Vue, Angular, and any JavaScript environment.
If you want to try assemblerjs without a build step:
<script src="https://unpkg.com/reflect-metadata@latest/Reflect.js"></script>
<script type="module">
import { Assemblage, Assembler } from 'https://unpkg.com/assemblerjs@latest/dist/index.js';
// Your code here
</script>
import 'reflect-metadata';
import { Assemblage, Assembler, AbstractAssemblage } from 'assemblerjs';
// Define a service
@Assemblage()
class Logger implements AbstractAssemblage {
log(message: string) {
console.log(message);
}
}
// Define an application that depends on Logger
@Assemblage({
inject: [[Logger]], // Declare dependencies
})
class App implements AbstractAssemblage {
constructor(private logger: Logger) {}
start() {
this.logger.log('App started!');
}
}
// Bootstrap the application
const app = Assembler.build(App);
app.start(); // Output: "App started!"
Comprehensive documentation is available at:
This package is part of the assemblerjs monorepo and depends on:
@assemblerjs/core - Internal utilities package# Install dependencies from workspace root
yarn install
# Build the package
npx nx build assemblerjs
# Run tests
npx nx test assemblerjs
assembler.js is optimized for tree-shaking with modular exports. Import only what you need:
// ❌ Large bundle (imports everything)
import * as Assembler from 'assemblerjs';
// ✅ Optimal (only imports required modules)
import { Assemblage, Assembler, AbstractAssemblage } from 'assemblerjs';
The package uses:
"sideEffects": false - Safe to remove unused modulesEnable decorators and reflection in your tsconfig.json:
{
"compilerOptions": {
"experimentalDecorators": true,
"emitDecoratorMetadata": true,
"target": "ES2020",
"module": "ESNext",
"lib": ["ES2020"]
}
}
This package is part of the assemblerjs monorepo and depends on:
@assemblerjs/core - Internal utilities package providing:
This dependency is automatically installed with assemblerjs and transparent to end users.
# Install dependencies from workspace root
yarn install
# Build the package
npx nx build assemblerjs
# Run tests
npx nx test assemblerjs
assemblerjs/
├── packages/
│ ├── assemblerjs/ # Main DI library (this package)
│ ├── core/ # Internal utilities
│ ├── dto/ # DTO utilities
│ ├── electron/ # Electron integration
│ ├── fetch/ # Fetch utilities
│ ├── mongo/ # MongoDB integration
│ └── rest/ # REST utilities
MIT
Made with ❤️ in Marseille
FAQs
A general purpose Dependency Injection library for node and browser.
The npm package assemblerjs receives a total of 615 weekly downloads. As such, assemblerjs popularity was classified as not popular.
We found that assemblerjs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.