
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
es-toolkit
Advanced tools
A state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.


es-toolkit is a state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.
// import from '@es-toolkit/es-toolkit' in jsr.
import { chunk, debounce } from 'es-toolkit';
const debouncedLog = debounce(message => {
console.log(message);
}, 300);
// This call will be debounced
debouncedLog('Hello, world!');
const array = [1, 2, 3, 4, 5, 6];
const chunkedArray = chunk(array, 2);
console.log(chunkedArray);
// Output: [[1, 2], [3, 4], [5, 6]]
es-toolkit provides Agent Skills for AI coding tools like Claude Code, Cursor, and Copilot.
npx skills add toss/es-toolkit
For Claude Code, you can also install via the plugin marketplace:
/plugin marketplace add toss/es-toolkit
/plugin install es-toolkit@es-toolkit-plugin
For more details, see the AI Integration guide.
We welcome contributions from everyone in the community. Read below for a detailed contribution guide.
MIT © Viva Republica, Inc. See LICENSE for details.
FAQs
A state-of-the-art, high-performance JavaScript utility library with a small bundle size and strong type annotations.
The npm package es-toolkit receives a total of 27,255,961 weekly downloads. As such, es-toolkit popularity was classified as popular.
We found that es-toolkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.