
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
hyperimport
Advanced tools
⚡ TypeScript imports on steriods. Import c, rust, zig etc. files in your typescript code and more.
A powerful plugin for the bun runtime that pushes the limits of Plugin and FFI APIs together, lets you easily import functions from other languages. It works with languages that support the C ABI (Zig, Rust, C/C++, C#, Nim, Kotlin, etc). If the loader of your language isn't there already, go ahead write your own custom loader with it's super flexible API and extend hyperimport to support your favorite language or even customize the built-in loaders to work in the way you want. Not just loaders but any plugin can be imported through hyperimport. Learn more.
Read the dev.to article for behind the scenes of this project.
In simple ways, you can do this,
index.ts
import { add } from "./add.rs";
console.log(add(5, 5)); // 10
add.rs
#[no_mangle]
pub extern "C" fn add(a: isize, b: isize) -> isize {
a + b
}
and, more...
—"I wanna learn more about this! How do I get started?"
Check out the Wiki page of this repository to read the entire documentation for this project.
If you have any questions, feel free to join the discord server here.
This repository uses MIT license. See LICENSE for full license text.
FAQs
⚡ Import c, rust, zig etc. files in your TypeScript code and more.
We found that hyperimport demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.