
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
TypeScript SDK for Postfleet — email infrastructure for AI agents.
npm install postfleet
Node 18+ (global fetch). A pf_ API key from https://postfleet.ai.
import { Postfleet } from 'postfleet';
const pf = new Postfleet({ apiKey: process.env.POSTFLEET_API_KEY! });
const box = await pf.mailboxes.create({ display_name: 'Support agent' });
const incoming = await pf.messages.waitFor({ mailbox_id: box.id });
if (!incoming) throw new Error('timed out waiting for mail');
// Read body_clean: the sanitized text. body_raw is the pre-sanitization original,
// kept for audit — the exact surface the screening pipeline stripped.
console.log(incoming.body_clean);
await pf.messages.send({
mailbox_id: box.id,
reply_to_message_id: incoming.id,
text: 'Got it — working on this now.',
client_id: 'reply-1',
});
Failed requests throw PostfleetError (status, optional code / retryable, and the parsed body). A network failure is status: 0 and retryable: true.
import { Postfleet, PostfleetError } from 'postfleet';
try {
await pf.messages.send({ mailbox_id, to, subject, text, client_id });
} catch (err) {
if (err instanceof PostfleetError && err.retryable) {
// retry with the SAME client_id
}
throw err;
}
client_id is optional and the SDK never mints one. Generate a client_id once per logical send and reuse it on retry; never mint a new one per attempt. A fresh key on retry is exactly the double-send the key prevents.
FAQs
TypeScript SDK for Postfleet — email infrastructure for AI agents.
The npm package postfleet receives a total of 4 weekly downloads. As such, postfleet popularity was classified as not popular.
We found that postfleet demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.