
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
ts-powertypes
Advanced tools
Collection of typescript types
This package is work in progress and semantic versioning is not yet guaranteed. If you use this package, please make sure to set explcit version number in your package json.
npm install ts-powertypes
import type { Flatten } from 'ts-powertypes';
type Book = {
title: string;
chapters: {
title: string;
content: Record<string, string>;
}[];
};
type FlatBook = Flatten<Book>;
/*
{
title: string;
[x: `chapters.${number}.title`]: string;
[x: `chapters.${number}.content.${string}]: string;
}
*/
Primitive union of all primitive typescript types
Key union of primitive types that can be used as object keys
ElementType gets the type of the elements of an Array, Map or Record
KeyOf union of the keys of an object
ValueOf union of the value types of an object
ObjectKeys strong type for the return type of Object.keys()
ObjectValues strong type for the return type of Object.values()
ObjectEntries strong type for the return type of Object.entries()
Split splits a string constant on a given separator
Join joins a string constant on a given separator
Flatten flattens an object structure
ObjectPaths union of all key paths of an object
ValuesAtPath value type of an object at a given patch
IsAny evaluates to true if the given type is any, else false
See changelog
FAQs
Collection of typescript types
We found that ts-powertypes demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.