
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
curse-api-js
Advanced tools
A modern NodeJS library to easily retrieve informations using the CurseForge API
🚀 A modern NodeJS wrapper library to easily retrieve informations using the new CurseForge API. An equivalent to the Curse API, a PHP Library made by mTxServ.
Available on NPM here.
Please do not forget to star the project if you like/use it ⭐
This library has been made to be lightweight and to not depend on any other package, for the best reliability. This way, you can safely use it for all of your projects without hassle.
npm install curse-api-js
const { curseClient } = require("curse-api-js");
const curse = new curseClient()
curse.setToken(<your_api_key>) // https://console.curseforge.com/?#/api-keys
// Get the 30 most popular mods for Minecraft 1.19
curse.Minecraft.getMods('1.19')
CurseAPIJS will support all the games available on CurseForge. For now, only Minecraft is available so all the methods will use Minecraft as an example. Feel free to suggest what will be the next game!
// Sets your personal/team token to access CurseForge API, mandatory.
curse.setToken(<your_api_key>)
// Access the specified game methods, e.g Minecraft
curse.Minecraft
// Returns all the Minecraft versions with their corresponding ID to perform more complex operations afterwards
curse.Minecraft.getVersions()
/**
* Returns mods for the specified version
* {string} mandatory - version slug ("1.19" for example), only major versions
* {int} optional - filter you wish to use among those enum values: https://docs.curseforge.com/?javascript#tocS_ModsSearchSortField
/
curse.Minecraft.getMods(<versionSlug>, <filter>)
// Not yet implemented
curse.Minecraft.getFeaturedMods()
FAQs
A modern NodeJS library to easily retrieve informations using the CurseForge API
We found that curse-api-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.