
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
postman-api
Advanced tools
TypeScript API starter using Bun + Elysia + Drizzle + OpenTelemetry and a CLI to generate and sync a code-first Postman configuration (api.postman.config.ts).
bun installcp .env.example .env and set POSTMAN_API_KEYbun run src/server.ts (or bun run start)bun run src/cli.ts initbun run src/cli.ts syncbun run src/cli.ts watchbun run src/cli.ts startnpm i postman-api or global: npm i -g postman-apinpx postman-api init (ou postman-api init se instalado globalmente)postman-api syncpostman-api watchpostman-api logout (use --keychain, --env ou --all)postman-api login (opções: --key <APIKEY> ou --from-env)Se preferir npm start postman-api no seu projeto, adicione no seu package.json:
{
"scripts": {
"start": "postman-api start"
}
}
Observações:
keytar. Como fallback, pode ser gravada no .env.api.postman.config.mjs (ESM). Se você já usa Bun e prefere TypeScript, mantenha api.postman.config.ts e use bun run src/cli.ts ... localmente.bun run dev — run server with watchbun run start — run serverbun run cli — run CLIbun run cli:watch — watch config and auto-syncbun run build — build ESM artifacts to dist/bun run drizzle:generate — generate SQL from schemabun run drizzle:push — push migrationspostmanapi init creates api.postman.config.ts which lets you define:
postmanapi sync reads the config, validates it, then creates/updates Postman collections and environments in the workspace set by POSTMAN_WORKSPACE_ID (or the workspaceId in the config).
Environment variables are loaded via dotenv when using the CLI.
Basic OpenTelemetry tracing is initialized in src/telemetry.ts with an OTLP HTTP exporter (OTEL_EXPORTER_OTLP_ENDPOINT, default http://localhost:4318).
Database lives in app.db. Schema in src/db/schema.ts. Configure Drizzle with drizzle.config.ts.
FAQs
Code-first Postman collections CLI and SDK (Bun/Node)
We found that postman-api demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.