
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
trpc-nestjs-adapter
Advanced tools
I don't use all of the features tRPC has :/
Both queries and mutations work.
I haven't tested subscriptions yet.
Batching doesn't work. Currently it't not possible to create multiple requests from 1 single HTTP request in Nest.JS (or it's a skill issue :) )
See the example
folder in this repo, but briefly
yarn add trpc-nestjs-adapter
main.ts
// Standard nest.js main.ts
import { NestFactory } from '@nestjs/core';
import { NestExpressApplication } from '@nestjs/platform-express';
import { AppModule } from './app.module';
async function bootstrap() {
const app = await NestFactory.create<NestExpressApplication>(AppModule);
await app.listen(3000);
}
bootstrap();
app.module.ts
import { Module } from '@nestjs/common';
import { TrpcModule } from 'trpc-nestjs-adapter';
import { rootRouter } from './trpc/root-trpc.router.ts';
import { createContext } from './trpc/create-context.ts';
@Module({
imports: [
AModule,
TrpcModule.forRoot({
path: '/trpc',
router: rootRouter,
createContext,
}),
],
})
export class AppModule { }
export const exampleMutation = trpc.procedure
.input()
.mutation(async ({ ctx })=>{
const nestService = await ctx.resolveNestDependency(SomeNestService);
await nestService.someServiceMethod()
})
The package is marked alpha
for a reason, but mostly It's not documented very well.
If/When/As the package gains traction I'll improve the example & related docs.
FAQs
TRPC adapter for NestJS
The npm package trpc-nestjs-adapter receives a total of 19 weekly downloads. As such, trpc-nestjs-adapter popularity was classified as not popular.
We found that trpc-nestjs-adapter demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.