
Security News
TC39 Advances Temporal to Stage 4 Alongside Several ECMAScript Proposals
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.
Ketting - The HATEOAS client for javascriptCheck out the Wiki for full documentation.
The Ketting library is a generic REST client with Hypermedia features.
The library will work with any JSON-based HTTP API, but it gets superpowers when using it with formats that have support for links, including:
And it even works with HTML links, and HTTP Link Headers.
Ketting is designed to both work in the browser and in Node.js. Additionally, it has react bindings that will make it work in a way that's familiar to Apollo-Client users.
const ketting = new Ketting('https://api.example.org/');
// Follow a link with rel="author". This could be a HTML5 `<link>`, a
// HAL `_links` or a HTTP `Link:`.
const author = await ketting.follow('author');
// Grab the current state
const authorState = await author.get();
// Change the firstName property of the object. Note that this assumes JSON.
authorState.data.firstName = 'Evert';
// Save the new state
await author.put(authorState);
Ketting is a library that sits on top of Fetch API to provide a RESTful interface and make it easier to follow REST best practices more strictly.
It provides some useful abstractions that make it easier to work with true
hypermedia / HATEOAS servers. It currently parses many hypermedia formats
and has a deep understanding of links and embedded resources. There's also
support for parsing and following links from HTML documents, and it
understands the HTTP Link: header.
It also has support for 'fetch middlewares', which is used to implement OAuth2 support, but also opens the door to development of other plugins.
Using this library it becomes very easy to follow links from a single bookmark, and discover resources and features on the server.
Read further on the Wiki
FAQs
Opiniated HATEAOS / Rest client.
The npm package ketting receives a total of 1,266 weekly downloads. As such, ketting popularity was classified as popular.
We found that ketting demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TC39’s March 2026 meeting advanced eight ECMAScript proposals, including Temporal reaching Stage 4 and securing its place in the ECMAScript 2026 specification.

Research
/Security News
Since January 31, 2026, we identified at least 72 additional malicious Open VSX extensions, including transitive GlassWorm loader extensions targeting developers.

Research
Six malicious Packagist packages posing as OphimCMS themes contain trojanized jQuery that exfiltrates URLs, injects ads, and loads FUNNULL-linked redirects.