
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
A JavaScript package for creating daily summaries of Bluesky posts for those you follow.
Retrieve your daily Bluesky feed as simplified JSON, perfect for building feed readers or AI-powered summarization tools.
For example Building an MCP Server to Explore My Bluesky Feed with code available at https://github.com/briangershon/bluesky-daily-mcp.
retrieveFollows()
retrieves follows from an author.retrieveAuthorFeed()
retrieves posts from an author, for a specific day.uriToUrl
converts a post uri to a public url to view post on the web.Information returned for each post:
{
"uri": "at://did:plc:oeio7zuhrsvmlyhia7e44nk6/app.bsky.feed.post/3lgzvm46vhu2c",
"content": "TIL about process.exitCode = 1;\n\nUseful if you want to mark a process as failed without immediately exiting it",
"createdAt": "2025-01-31T11:32:00.769Z",
"isRepost": false,
"links": ["https://example.com"]
}
Walk through the working code that retrieves posts for follows in ./scripts/retrieve-posts.ts
.
How to run it:
BLUESKY_USERNAME
and BLUESKY_PASSWORD
in an .env
file in your root directory. You can create these via Bluesky account settings > Privacy & Security > App passwords
.BLUESKY_USERNAME=
BLUESKY_PASSWORD=
Change SOURCE_ACTOR
, TARGET_DATE
and TIMEZONE_OFFSET
in ./src/scripts/retrieve-posts.ts
to your Bluesky handle or did
, a date in yyyymmdd
format and a timezone offset in hours (e.g. -8
for PST).
npm install
npm run retrievePosts
npm install @atproto/api
npm install bsky-tldr
Grab sample code from ./scripts/retrieve-posts.ts
.
Here's the post data structure returned from our retrieveAuthorFeed
function for viewing posts for a specific author:
{
"uri": "at://did:plc:oeio7zuhrsvmlyhia7e44nk6/app.bsky.feed.post/3lgzvm46vhu2c",
"content": "TIL about process.exitCode = 1;\n\nUseful if you want to mark a process as failed without immediately exiting it",
"createdAt": "2025-01-31T11:32:00.769Z",
"isRepost": false,
"links": []
}
Posts that include uri
, content
, createdAt
, isRepost
(false
means it's an original by the author) and links
which are the full links mentioned in the post.
If you need more information in your app, use @atproto/api
library directly to retrieve the author's profile using their did
, or the full post and replies via its uri
.
npm install
npm run dev
npm run test:watch
npm run coverage
If you want to make changes to this package while testing it with another project:
# In your package directory
npm link
# In your test project directory
npm link your-package-name
After merging latest code to main
branch:
git checkout main && git pull
npm version patch
# or minor, or majorgit push --follow-tags
FAQs
A JavaScript package for creating daily summaries of Bluesky posts for those you follow.
The npm package bsky-tldr receives a total of 0 weekly downloads. As such, bsky-tldr popularity was classified as not popular.
We found that bsky-tldr demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.