
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Rivu is a modern TypeScript library for generating RSS 2.0 feeds programmatically. It enforces strict type safety, validates required channel metadata and produces a fully compliant RSS feed as an XML document.
Rivu provides the following functionalities:
Install Rivu right now using the following commands:
pnpm i rivu
You can quickly generate a RSS 2.0 output with the following lines of code:
import { Feed } from "rivu";
const feed = new Feed({
title: "Somraj's Blog",
link: "https://jarmos.dev/rss.xml",
description:
"The personal blog (and digital garden) maintained by Somraj Saha (aka Jarmos).",
language: "en-US",
items: [
{
title: "Example Blog",
description: "Lorem Ipsum",
pubDate: new Date("2025-10-10"),
},
],
});
feed.generate();
This should print a full RSS 2.0 feed as a string like this:
<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
<channel>
...
</channel>
</rss>
For more information with regards to the API reference, a more detailed usage guide and the contribution guidelines, check out the official documentation.
The package is built using open-source tools and the source code of the package itself is also provided publicly accessible under an open-source license. Therefore, you are free to copy, modify and/or distribute the package under the T&Cs of the MIT license. For more information about the distribution rights in the LICENSE document.
FAQs
A modern and type-safe RSS generator for Node.js.
The npm package rivu receives a total of 3 weekly downloads. As such, rivu popularity was classified as not popular.
We found that rivu demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.