
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
graphql-extra-scalars
Advanced tools
Collection of extra GraphQL scalar types like Email, URL, Password and more
This is a collection of extra GraphQL scalar types.
Let me give you an overview of the available types. If you need more detail about how to use them, check tests/schema.js.
The primitive types, aka everything that may be represented as a string. The ones with parameters you need to instantiate with new and pass according parameters, the others may be used as are.
GraphQLDateTimeGraphQLEmailGraphQLIPv4GraphQLLimitedString(min, max, alphabet)GraphQLMacAddressGraphQLPassword(min, max, alphabet, complexity)GraphQLURLGraphQLUUIDcomplexity options:
{
alphaNumeric: false,
mixedCase: false,
specialChars: false,
}
Most likely you already will have it, but do not forget to also install graphql, since it is required as peer dependency:
npm install graphql graphql-extra-scalars --save
or
yarn add graphql graphql-extra-scalars
Use it in your GraphQLSchema as you would use any other type.
import {
GraphQLDateTime,
GraphQLEmail,
GraphQLIPv4,
GraphQLLimitedString,
GraphQLMacAddress,
GraphQLPassword,
GraphQLURL,
GraphQLUUID
} from 'graphql-extra-scalars';
import {DocumentNode} from 'graphql';
import {gql} from 'graphql-tag';
const schema: DocumentNode = gql`
scalar DateTime
`;
const resolvers = {
DateTime: GraphQLDateTime,
Password: new GraphQLPassword(8)
};
Contributions are very welcome, please feel free to submit a type. If you do so make sure there are test cases in place.
The test suite may be invoked by running:
npm test
FAQs
Collection of extra GraphQL scalar types like Email, URL, Password and more
We found that graphql-extra-scalars demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.