
Security News
Microsoft Releases Open Source Toolkit for AI Agent Runtime Security
Microsoft has released an open source toolkit for enforcing runtime security policies on AI agents as adoption accelerates faster than governance controls.
typedpkg-plugin-scripts
Advanced tools
[](https://badge.fury.io/js/typedpkg-plugin-scripts) [](https://opensource.org/licenses/ISC) [ for script filesMap file extensions to their execution commands:
.ts files → tsx (TypeScript execution).py files → python (Python scripts).js files → node (JavaScript execution).sh files → bash (Shell scripts)build_database.ts → build-database scriptDeploy_App.py → deploy-app scriptAdd this plugin to your typedpkg configuration:
export default {
plugins: ['scripts'],
config: {
pkg_ts: {
plugins: {
scripts: {
dir: 'scripts', // optional, defaults to 'scripts'
runners: {
ts: 'tsx',
py: 'python',
js: 'node',
sh: 'bash',
},
},
},
},
},
}
The plugin accepts these configuration options:
dir (optional)string'scripts'Examples:
"./scripts""src/scripts""tools"runners (required)Record<string, string>Example:
{
"ts": "tsx", // TypeScript files
"py": "python", // Python files
"js": "node", // JavaScript files
"sh": "bash", // Shell scripts
"rb": "ruby", // Ruby scripts
"go": "go run" // Go files
}
Given this directory structure:
scripts/
├── build_database.ts
├── deploy_app.py
├── cleanup.sh
└── generate_docs.js
With this configuration:
{
dir: 'scripts',
runners: {
'ts': 'tsx',
'py': 'python',
'sh': 'bash',
'js': 'node'
}
}
The plugin generates these npm scripts:
{
"build-database": "tsx scripts/build_database.ts",
"deploy-app": "python scripts/deploy_app.py",
"cleanup": "bash scripts/cleanup.sh",
"generate-docs": "node scripts/generate_docs.js"
}
Run them with:
npm run build-database
npm run deploy-app
npm run cleanup
npm run generate-docs
yarn pkg:build # Build the plugin
yarn install # Install dependencies
ISC
FAQs
[](https://badge.fury.io/js/typedpkg-plugin-scripts) [](https://opensource.org/licenses/ISC) [
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Microsoft has released an open source toolkit for enforcing runtime security policies on AI agents as adoption accelerates faster than governance controls.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.