![\"CI\"](\"https://github.com/DERRICK-TORKORNOO/uws-akwaaba/actions/workflows/ci.yml/badge.svg\"){kind=icon}
\nProject type: TypeScript library, published as an npm package that you import into your own uWebSockets.js server. Runnable example servers live in
examples/.
A lightweight, dependency-free web framework and toolkit for building HTTP APIs on uWebSockets.js:
\njson, text, html, send, redirect, empty, error) with compression and ETagsawaituWS is fast because it is low-level: the request object dies as soon as your handler returns or awaits, the body is lost unless you subscribe to it immediately, aborted responses must never be written, and the status line must come before every header. This library handles those rules for you, and its test suite checks them against a real uWS server.
\nnpm install uws-akwaaba uNetworking/uWebSockets.js#v20.52.0\nuWebSockets.js is a peer dependency. Node.js 20 or newer is required (uWebSockets.js v20.52 ships no Node 18 binary). uWebSockets.js ships glibc builds only, so Alpine (musl) based environments are not supported.
import uWS from "uWebSockets.js";\nimport pino from "pino";\nimport { createRouter, authenticate, bearerAuth, readJson, HttpError, structuredLogger } from "uws-akwaaba";\n\nconst app = uWS.App();\nconst logger = pino();\nconst api = createRouter(app, {\n prefix: "/api",\n compress: true,\n // one JSON line per request: id, method, url, status, durationMs, bytes\n requestLog: { log: structuredLogger(logger) },\n // unexpected errors (not 4xx HttpErrors), e.g. for Sentry.captureException\n onException: (err, ctx) => logger.error({ err, route: ctx.route, requestId: ctx.state.requestId }),\n});\n\napi.get("/users/:id", async (ctx) => {\n const user = await db.findUser(ctx.params.id);\n if (!user) throw new HttpError(404, "No such user");\n ctx.respond.json(user, { etag: true });\n});\n\napi.post("/users", authenticate({ strategies: [bearerAuth({ verify: verifyJwt })] }), async (ctx) => {\n // The body is captured at request start, so reading it after awaits is fine.\n const input = await readJson(ctx.res, ctx.req, { validate: (v) => UserSchema.parse(v) });\n ctx.respond.json(await db.createUser(input), { status: 201 });\n});\n\napp.listen(3000, (token) => token && logger.info({ port: 3000 }, "listening"));\nErrors thrown anywhere in the chain are rendered for you: an HttpError (or a body reader's 400/413/415/422) becomes its status and a JSON body; anything else becomes a 500 without leaking the message. A route that finishes without responding gets a 404.
Prefer plain uWS handlers? Every helper also works without the router; see Without the router.
\nexamples/router-app.ts (npm run dev:example-router) is a complete small API using most of the features below.
Each module is its own build entry, so importing a subpath pulls in only that code.
\n| Import path | What it provides |
|---|---|
uws-akwaaba | everything below |
uws-akwaaba/router | createRouter, compose, timeout, authenticate, limit, csrf |
uws-akwaaba/responder | createResponder, withResponder, withSafeResponder |
uws-akwaaba/body | readJson, readText, readUrlencoded, readBuffer, readRawBody, parseUrlencoded, decodeText |
uws-akwaaba/multipart | parseMultipart, parseContentDisposition, getBoundary |
uws-akwaaba/static | serveStatic, resolveSafePath |
uws-akwaaba/auth-register | registerGlobalAuth, bearerAuth, apiKeyAuth, sessionAuth, getAuth, TinyTTLCache |
uws-akwaaba/rate-limit | rateLimit, createRateLimiter, MemoryRateLimitStore |
uws-akwaaba/cors | createCors(config) → { applyHeaders, preflight } |
uws-akwaaba/cors-register | registerGlobalCors(app, config, opts) |
uws-akwaaba/cookies | parseCookieHeader, serializeCookie, buildCookieHeaders, clearCookie, createCookieSigner |
uws-akwaaba/security-headers | securityHeaders(opts) |
uws-akwaaba/request-log | withRequestLog, getRequestId, jsonLineLogger |
uws-akwaaba/lifecycle | createLifecycle (graceful shutdown) |
uws-akwaaba/websocket | jsonWebSocket, sendJson, publishJson |
uws-akwaaba/query | parseQuery, queryReader |
uws-akwaaba/errors | HttpError, BadRequestError, PayloadTooLargeError, UnsupportedMediaTypeError, UnprocessableEntityError |
uws-akwaaba/http | Status, reasonPhrase, statusLine |
uws-akwaaba/file-ops | ensureDir, moveFile, copyFile, removeFile, fileHash, hashBuffer, detectMimeFromBytes, safeFilename |
const router = createRouter(app, { prefix: "/api", trustProxy: false });\nrouter.use(timeout(5_000)); // 503 if nothing responded in time\nrouter.use(limit({ max: 100, windowMs: 60_000 })); // RateLimit-* headers, 429 + Retry-After\nrouter.post("/transfer", csrf(), authenticate({ strategies, require: { roles: ["admin"] } }), handler);\nEach handler receives a Context:
| Field | Description |
|---|---|
ctx.res | the live uWS response (for body readers and streaming) |
ctx.req | a snapshot of the request that stays valid after await |
ctx.respond | the responder (below) |
ctx.params | named route parameters, { id: "42" } for /users/:id |
ctx.query | string/list/number/int/bool accessors over the query string |
ctx.state | per-request storage for middleware; starts with ip |
Middleware runs onion-style (await next()); calling next() twice is an error. onError and onUnhandled options customise error and 404 responses.
const respond = createResponder(res, req, {\n cors: { origin: ["https://app.example.com"], credentials: true },\n defaultHeaders: securityHeaders(),\n compress: true, // brotli/gzip for text-like bodies over 1 KB\n etag: true, // weak ETag + 304 on If-None-Match\n});\n\nrespond.json({ ok: true }); // 200 application/json\nrespond.text("pong", { status: 201 });\nrespond.html("<h1>Hi</h1>");\nrespond.send(pngBytes, "image/png");\nrespond.redirect("/login", 303); // refuses //host, javascript: and CR/LF\nrespond.empty(); // 204\nrespond.error("Bad input"); // 400 { "error": "Bad input" }\nrespond.header("Server-Timing", "db;dur=12"); // queue a header for whatever is sent later\nrespond.json(data, {\n cookies: [{ name: "sid", value: token, options: { httpOnly: true, secure: true, sameSite: "Lax" } }],\n cors: false, // skip CORS for this response only\n});\nrespond.sent; // true once a response went out; later calls are ignored\nThe status line is always written first (uWS fixes it at 200 as soon as any header is written), a second response is dropped instead of throwing, and nothing is written to a client that has disconnected.
\nAll readers enforce maxBytes (default 1 MB), copy uWS's short-lived buffers, and reject with typed errors (413 too large, 400 malformed, 415 wrong type with strictContentType, 422 failed validation).
const user = await readJson(res, req, { validate: (v) => UserSchema.parse(v) }); // zod, valibot, ajv...\nconst form = await readUrlencoded(res, req, { strictContentType: true });\nconst text = await readText(res, req); // any WHATWG charset, e.g. ISO-8859-1\nconst raw = await readBuffer(res, req, { maxBytes: 10 * 1024 * 1024 });\nuWS only delivers the body to a handler subscribed during the request callback. The router does this for you; in plain handlers call deferBody(res) first if you need to await before reading.
const { fields, files } = await parseMultipart(res, req, {\n fileStrategy: "auto", // "buffer" | "file" | "auto" (spill to disk above bufferFileThreshold)\n tempDir: "/var/tmp/uploads",\n maxBytes: 50 * 1024 * 1024,\n maxFileSize: 20 * 1024 * 1024,\n maxFileCount: 5,\n maxFieldSize: 64 * 1024,\n allowedMimeTypes: ["image/*", "application/pdf"],\n});\n// files[i]: { fieldName, filename, mime, size, buffer? , path? }\nThe parser streams with disk backpressure, enforces every limit as data arrives, sanitises file names (including Windows ..\\ traversal), resolves only after files are flushed to disk, and deletes the temp files it created when anything fails. It never deletes a file it did not create.
const assets = serveStatic("./public", { prefix: "/assets", maxAgeSeconds: 3600, immutable: true });\napp.get("/assets/*", assets);\napp.head("/assets/*", assets);\nWeak ETag + Last-Modified with 304, single byte ranges (206/416, If-Range), HEAD, index files, and streaming through tryEnd/onWritable so slow clients do not buffer whole files in memory. Encoded, backslash and .. traversal, NUL bytes and dotfiles are refused.
Inside the router use authenticate(...). For plain handlers, register rules once for the whole app:
registerGlobalAuth(app, {\n default: { handlers: [bearerAuth({ verify: verifyJwt })] },\n rules: [\n { match: { prefix: "/public" }, skip: true },\n { match: { prefix: "/admin" }, require: { roles: ["admin"] } },\n { match: { prefix: "/ingest" }, handlers: [apiKeyAuth({ lookup: findKey })] },\n ],\n cache: { enabled: true, ttlMs: 5000 },\n});\n\napp.get("/me", (res) => {\n const auth = getAuth(res); // { user, claims, token }\n});\nRules match exact path first, then longest prefix, then regex. Strategies may be async; the registrar keeps the request usable for your handler and turns a throwing strategy into a 500. Role and scope policies apply to cached tokens too.
\napp.post("/login", rateLimit(loginHandler, { max: 5, windowMs: 60_000 }));\n\nconst signer = createCookieSigner([process.env.COOKIE_SECRET!, process.env.OLD_COOKIE_SECRET!]);\nconst value = signer.sign("user:42"); // "user:42.<hmac>"\nsigner.unsign(value); // "user:42", or undefined if tampered\n\nbuildCookieHeaders([{ name: "sid", value, options: { httpOnly: true, csrfToken: createCsrfToken() } }]);\n\nsecurityHeaders({ strictTransportSecurity: { maxAgeSeconds: 31_536_000 } });\nclientIp(res, req, { trustProxy }) uses the socket address unless you explicitly trust X-Forwarded-For. Set trustProxy: true behind one reverse proxy you control, or the number of chained proxies (trustProxy: 2); the client address is read that many entries from the right, so values a client puts in the header itself are ignored.
The library writes no logs of its own; you choose where entries go. With the router, pass requestLog and every route gets an access log and a request id (echoed as X-Request-Id, available as ctx.state.requestId). onException receives unexpected errors (not 4xx HttpErrors, not client aborts) before they are rendered, which is where an error tracker belongs.
import pino from "pino";\nimport * as Sentry from "@sentry/node";\n\nconst logger = pino();\ncreateRouter(app, {\n requestLog: { log: structuredLogger(logger) }, // 5xx/aborted -> error, 4xx -> warn, else info\n onException: (err, ctx) => Sentry.captureException(err, { tags: { route: ctx.route } }),\n});\nstructuredLogger accepts anything with pino-style info/warn/error(object, message) methods; jsonLineLogger writes JSON lines to stdout with no dependency. Outside the router, wrap individual handlers:
app.get("/files/*", withRequestLog(serveStatic("./files", { prefix: "/files" }), { log: jsonLineLogger }));\n// {"time":"…","id":"3f7d…","method":"GET","url":"/files/a.pdf","status":200,"durationMs":5.3,"bytes":35,"aborted":false}\n\nconst life = createLifecycle();\napp.get("/work", life.track(handler));\nawait life.listen(app, 3000);\nprocess.once("SIGTERM", async () => {\n await life.shutdown({ timeoutMs: 15_000 }); // stop accepting, drain in-flight, then close\n process.exit(0);\n});\nonException(err, ctx) is the contract for error trackers. It is called once per request, with the original error, for anything that is not a 4xx HttpError or a client abort, and before the response is rendered; ctx.route and ctx.state.requestId identify the request. The client still gets the generic 500 body (the message is never leaked), and an exception thrown by the reporter itself is ignored. These guarantees are covered by tests/integration/routerObservability.int.test.ts.
createRouter(app, {\n requestLog: { log: structuredLogger(logger) },\n onException: (err, ctx) =>\n Sentry.captureException(err, { tags: { route: ctx.route }, extra: { requestId: ctx.state.requestId } }),\n});\ncreateLifecycle().track(...) and call shutdown({ timeoutMs }) on SIGTERM, so in-flight requests finish before the process exits.api.get("/health", ...) (see examples/router-app.ts) gives monitoring something to call.trustProxy to the number of trusted proxies in front of the app (true for one) so ctx.state.ip and rateLimit see the real client; leave it off otherwise.requestLog (with jsonLineLogger or structuredLogger(pino())) and onException to the router.app.ws(\n "/chat",\n jsonWebSocket<{ name: string }, { text: string }>({\n validate: (v) => MessageSchema.parse(v),\n open: (ws) => ws.subscribe("room"),\n onMessage: (ws, msg) => publishJson(app, "room", { text: msg.text }),\n }),\n);\nInvalid JSON, binary frames and handler errors are reported to the client (or your onError) instead of crashing.
app.post(\n "/echo",\n withResponder(async (respond, req, res) => {\n const body = await readJson(res, req, { maxBytes: 64 * 1024 });\n respond.json(body, { status: 201 });\n }),\n);\nwithResponder installs the abort guard, reads the headers it needs up front, and renders thrown errors like the router does (onError to customise). registerGlobalCors(app, config) applies CORS to every route registered after it.
uws-akwaaba is a library: every module is a function or factory that you call from your own uWebSockets.js app, and nothing runs on import. The layout:
\nsrc/\n index.ts public entry: re-exports only\n router.ts createRouter, compose, Context\n router/middleware.ts timeout, authenticate, limit, csrf\n responder.ts createResponder, withResponder, withSafeResponder\n body.ts body readers with limits, validation and typed errors\n multipart.ts streaming multipart/form-data state machine\n multipart/ header parsing, FileSink (disk writes), public types\n static.ts serveStatic with conditional/range requests\n auth-register.ts rule-based auth registrar\n auth/ types, TTL cache, rule matching, strategies\n rate-limit.ts fixed-window limiter, store, route wrapper\n request-log.ts request ids and access logging\n lifecycle.ts graceful shutdown\n websocket.ts JSON WebSocket behaviour\n errors.ts HttpError and friends\n cors.ts, cors-register.ts, cookies.ts, signed-cookies.ts, csrf.ts,\n security-headers.ts, query.ts, http.ts, types.ts\n utils/ abort fan-out, request snapshots, deferBody, client IP,\n compression, range parsing, MIME types, file helpers\nexamples/ runnable servers, one per feature (not part of the package)\n docker/ optional isolated environment for the checks and examples\ntests/ unit suites mirroring src/, plus tests/integration which\n runs everything against a real uWS server on a random port\nThree small mechanisms carry most of the uWS-specific safety:
\nutils/abort.ts owns the single onAborted registration uWS allows per response and fans it out, so readers, the responder and the parser never displace each other.utils/request-snapshot.ts copies a request (all headers, URL, method, query, params) so it can be used after await.utils/defer-body.ts captures the body at request start and pauses the socket until a reader asks for it.git clone https://github.com/DERRICK-TORKORNOO/uws-akwaaba.git\ncd uws-akwaaba\nnpm ci\nnpm test # unit + integration tests\nnpm run test:coverage # with coverage thresholds (what CI runs)\nnpm run lint # eslint\nnpm run format:check # prettier\nnpm run typecheck # tsc\nnpm run build # ESM + CJS + .d.ts into dist/\nRun an example (see package.json for the full list; set PORT or TEMP_DIR to change the port or upload directory, as listed in examples/.env.example):
npm run dev:example-router\nA devcontainer configuration is included for VS Code and Codespaces, and examples/docker can run the checks and examples in an isolated environment.
See CONTRIBUTING.md for the workflow and CHANGELOG.md for release notes.
\nMIT © Derrick Mensah Torkornoo
","dependencies":[],"licence":{"spdx":"MIT","verdict":"pass"},"scan":{"verdict":"pass","scanner_version":"2026.10.1","at":"2026-11-02T09:33:44.898Z","checks":[{"id":"secrets","tool":"x402git/secrets","tool_version":"2026.10.1","status":"pass","at":"2026-11-02T09:33:44.898Z","findings":0},{"id":"limits","tool":"x402git/limits","tool_version":"2026.10.1","status":"pass","at":"2026-11-02T09:33:44.898Z","findings":0},{"id":"known_vulns","tool":"osv.dev","tool_version":"2026-11-07","status":"findings","at":"2026-11-07T04:00:55.394Z","findings":2,"packages":317},{"id":"known_malware","tool":"osv.dev/MAL","tool_version":"2026-11-07","status":"pass","at":"2026-11-07T04:00:55.394Z","findings":0,"packages":317},{"id":"dep_behaviour","tool":"socket.dev","tool_version":"2026-11-02","status":"findings","at":"2026-11-02T09:33:44.898Z","findings":549,"packages":317},{"id":"capabilities","tool":"x402git/caps","tool_version":"2026.09.1","status":"findings","at":"2026-11-02T09:33:44.898Z","findings":30},{"id":"injection","tool":"x402git/inject","tool_version":"2026.10.1","status":"pass","at":"2026-11-02T09:33:44.898Z","findings":0}],"findings":[{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"workflow","severity":"MODERATE","description":"A GitHub Actions workflow runs on push, pull_request, workflow_dispatch","path":".github/workflows/ci.yml"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"workflow","severity":"MODERATE","description":"A GitHub Actions workflow runs on push","path":".github/workflows/release.yml"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to a","path":"tests/multipart/parsing.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to a.com","path":"tests/cors/preflight.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to allowed.com","path":"tests/responder/createResponder.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to app.akwaabahr.com","path":"examples/cors-variant.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to app.com","path":"tests/cors/registerGlobalCors.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to app.example.com","path":"tests/responder/asyncSafety.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to b.com","path":"tests/cors/preflight.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to eslint.org","path":"package-lock.json"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to evil.com","path":"tests/cors/createCors.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to example.com","path":"tests/responder/moreResponses.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to facial.akwaabahr.com","path":"tests/cors/createCors.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to foo.com","path":"tests/responder/createResponder.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to github.com","path":"package-lock.json"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to given.example.com","path":"tests/responder/asyncSafety.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to header.example.com","path":"tests/responder/asyncSafety.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to opencollective.com","path":"package-lock.json"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to paulmillr.com","path":"package-lock.json"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to registry.npmjs.org","path":"package-lock.json"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to tidelift.com","path":"package-lock.json"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"host","severity":"LOW","description":"Talks to x.com","path":"tests/integration/responder.int.test.ts"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable COMPOSE_FILE","path":".github/workflows/ci.yml"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable COOKIE_SECRET","path":"README.md"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable GH_TOKEN","path":".github/workflows/release.yml"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable GITHUB_REF_NAME","path":".github/workflows/release.yml"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable GITHUB_TOKEN","path":".github/workflows/release.yml"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable OLD_COOKIE_SECRET","path":"README.md"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable PORT","path":"examples/docker/docker-compose.yml"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"env","severity":"LOW","description":"Reads the environment variable TEMP_DIR","path":"examples/env.ts"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"@vitest/coverage-istanbul 5.0.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"@vitest/coverage-istanbul","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"@vitest/coverage-istanbul 5.0.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"@vitest/coverage-istanbul","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"@vitest/coverage-istanbul 5.0.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"@vitest/coverage-istanbul","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"@vitest/coverage-istanbul 5.0.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"@vitest/coverage-istanbul","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"deprecated","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — deprecated by its author","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"dynamicRequire","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — loads modules by a computed name","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"dynamicRequire","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — loads modules by a computed name","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"dynamicRequire","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — loads modules by a computed name","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"eslint 9.39.5 (direct, dev only) — contains hard-coded URLs","package":{"ecosystem":"npm","name":"eslint","version":"9.39.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"eslint-config-prettier 10.1.8 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"eslint-config-prettier","version":"10.1.8","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"eslint-config-prettier 10.1.8 (direct, dev only) — contains hard-coded URLs","package":{"ecosystem":"npm","name":"eslint-config-prettier","version":"10.1.8","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptAnomaly","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — flagged for review by Socket's classifier as anomalous","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — ships minified code with no source","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"prettier 3.9.10 (direct, dev only) — contains hard-coded URLs","package":{"ecosystem":"npm","name":"prettier","version":"3.9.10","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptAnomaly","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — flagged for review by Socket's classifier as anomalous","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptAnomaly","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — flagged for review by Socket's classifier as anomalous","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — can attach a debugger","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"dynamicRequire","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — loads modules by a computed name","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"dynamicRequire","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — loads modules by a computed name","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"dynamicRequire","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — loads modules by a computed name","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"ts-node 10.9.2 (direct, dev only) — contains hard-coded URLs","package":{"ecosystem":"npm","name":"ts-node","version":"10.9.2","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptAnomaly","severity":"LOW","description":"tsup 8.5.1 (direct, dev only) — flagged for review by Socket's classifier as anomalous","package":{"ecosystem":"npm","name":"tsup","version":"8.5.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptAnomaly","severity":"LOW","description":"tsup 8.5.1 (direct, dev only) — flagged for review by Socket's classifier as anomalous","package":{"ecosystem":"npm","name":"tsup","version":"8.5.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"tsup 8.5.1 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"tsup","version":"8.5.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"tsup 8.5.1 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"tsup","version":"8.5.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"tsup 8.5.1 (direct, dev only) — reads or writes files","package":{"ecosystem":"npm","name":"tsup","version":"8.5.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"usesEval","severity":"MODERATE","description":"tsup 8.5.1 (direct, dev only) — evaluates code at runtime","package":{"ecosystem":"npm","name":"tsup","version":"8.5.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"tsup 8.5.1 (direct, dev only) — contains hard-coded URLs","package":{"ecosystem":"npm","name":"tsup","version":"8.5.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"typescript-eslint 8.72.1 (direct, dev only) — contains hard-coded URLs","package":{"ecosystem":"npm","name":"typescript-eslint","version":"8.72.1","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"vitest 5.0.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"vitest","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"vitest 5.0.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"vitest","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"vitest 5.0.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"vitest","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"vitest 5.0.5 (direct, dev only) — reads environment variables","package":{"ecosystem":"npm","name":"vitest","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"networkAccess","severity":"MODERATE","description":"vitest 5.0.5 (direct, dev only) — makes network requests at runtime","package":{"ecosystem":"npm","name":"vitest","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"vitest 5.0.5 (direct, dev only) — contains hard-coded URLs","package":{"ecosystem":"npm","name":"vitest","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"usesEval","severity":"MODERATE","description":"vitest 5.0.5 (direct, dev only) — evaluates code at runtime","package":{"ecosystem":"npm","name":"vitest","version":"5.0.5","direct":true,"dev":true},"source":"socket.dev"},{"kind":"vulnerability","check":"known_vulns","tier":"disclosed","rule_id":"GHSA-g7r4-m6w7-qqqr","severity":"LOW","description":"esbuild@0.27.7 (npm): esbuild allows arbitrary file read when running the development server on Windows","package":{"ecosystem":"npm","name":"esbuild","version":"0.27.7"},"advisory_ids":["GHSA-g7r4-m6w7-qqqr"],"source":"osv.dev"},{"kind":"vulnerability","check":"known_vulns","tier":"disclosed","rule_id":"GHSA-g3hv-75wg-m249","severity":"MODERATE","description":"minimatch@10.2.6 (npm): minimatch has potential denial of service via globparts amplification","package":{"ecosystem":"npm","name":"minimatch","version":"10.2.6"},"advisory_ids":["GHSA-g3hv-75wg-m249","CVE-2026-118764"],"source":"osv.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"newAuthor","severity":"LOW","description":"convert-source-map 2.0.0 (transitive, dev only) — published by an author new to this package","package":{"ecosystem":"npm","name":"convert-source-map","version":"2.0.0","direct":false,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"potentialVulnerability","severity":"MODERATE","description":"es-module-lexer 2.3.2 (transitive, dev only) — flagged for review as a possible vulnerability","package":{"ecosystem":"npm","name":"es-module-lexer","version":"2.3.2","direct":false,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"installScripts","severity":"MODERATE","description":"esbuild 0.27.7 (transitive, dev only) — install scripts run when installed","package":{"ecosystem":"npm","name":"esbuild","version":"0.27.7","direct":false,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptSecurity","severity":"MODERATE","description":"load-tsconfig 0.2.5 (transitive, dev only) — flagged for review by Socket's classifier as a security risk","package":{"ecosystem":"npm","name":"load-tsconfig","version":"0.2.5","direct":false,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptSecurity","severity":"MODERATE","description":"load-tsconfig 0.2.5 (transitive, dev only) — flagged for review by Socket's classifier as a security risk","package":{"ecosystem":"npm","name":"load-tsconfig","version":"0.2.5","direct":false,"dev":true},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptDidYouMean","severity":"MODERATE","description":"flagged for review by Socket's classifier in 2 transitive packages","source":"socket.dev","aggregate":{"packages":2,"examples":["obug@2.2.1","obug@3.0.0"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptAnomaly","severity":"LOW","description":"flagged for review by Socket's classifier in 18 transitive packages","source":"socket.dev","aggregate":{"packages":18,"examples":["@cspotcode/source-map-support@0.8.1","ajv@6.15.0","any-promise@1.3.0"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"shellAccess","severity":"MODERATE","description":"shellAccess in 10 transitive packages","source":"socket.dev","aggregate":{"packages":10,"examples":["commander@4.1.1","cross-spawn@7.0.6","detect-libc@2.1.2"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"usesEval","severity":"MODERATE","description":"usesEval in 5 transitive packages","source":"socket.dev","aggregate":{"packages":5,"examples":["@babel/traverse@8.0.10","ajv@6.15.0","lodash.merge@4.6.2"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"networkAccess","severity":"MODERATE","description":"networkAccess in 3 transitive packages","source":"socket.dev","aggregate":{"packages":3,"examples":["esbuild@0.27.7","mz@2.7.0","rollup@4.66.0"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"unmaintained","severity":"LOW","description":"unmaintained in 40 transitive packages","source":"socket.dev","aggregate":{"packages":40,"examples":["acorn-jsx@5.3.2","any-promise@1.3.0","create-require@1.1.1"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"filesystemAccess in 38 transitive packages","source":"socket.dev","aggregate":{"packages":38,"examples":["@cspotcode/source-map-support@0.8.1","@eslint/eslintrc@3.3.7","argparse@2.0.1"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"envVars in 29 transitive packages","source":"socket.dev","aggregate":{"packages":29,"examples":["@babel/core@8.0.10","@babel/helper-compilation-targets@8.0.7","minimatch@10.2.6"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"urlStrings","severity":"LOW","description":"urlStrings in 25 transitive packages","source":"socket.dev","aggregate":{"packages":25,"examples":["@babel/core@8.0.10","@babel/helpers@8.0.10","@eslint/eslintrc@3.3.7"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"debugAccess","severity":"LOW","description":"debugAccess in 16 transitive packages","source":"socket.dev","aggregate":{"packages":16,"examples":["@eslint/eslintrc@3.3.7","@humanwhocodes/module-importer@1.0.1","bundle-require@5.1.0"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"dynamicRequire","severity":"LOW","description":"dynamicRequire in 10 transitive packages","source":"socket.dev","aggregate":{"packages":10,"examples":["@cspotcode/source-map-support@0.8.1","browserslist@4.29.5","esbuild@0.27.7"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"minifiedFile","severity":"LOW","description":"minifiedFile in 6 transitive packages","source":"socket.dev","aggregate":{"packages":6,"examples":["baseline-browser-mapping@2.11.34","confbox@0.1.8","es-module-lexer@2.3.2"]}}],"capabilities":{"tools":[],"runs":[{"path":".github/workflows/ci.yml","kind":"workflow","detail":"push, pull_request, workflow_dispatch"},{"path":".github/workflows/release.yml","kind":"workflow","detail":"push"}],"hosts":[{"host":"127.0.0.1","local":true,"from":"code","paths":["examples/docker/docker-compose.yml","tests/integration/lifecycle.int.test.ts","tests/utils/server.ts"]},{"host":"a","local":false,"from":"code","paths":["tests/multipart/parsing.test.ts"]},{"host":"a.com","local":false,"from":"code","paths":["tests/cors/preflight.test.ts","tests/responder/createResponder.test.ts"]},{"host":"allowed.com","local":false,"from":"code","paths":["tests/responder/createResponder.test.ts"]},{"host":"app.akwaabahr.com","local":false,"from":"code","paths":["examples/cors-variant.ts","tests/body/readJson.flow.test.ts","tests/cors/createCors.test.ts"]},{"host":"app.com","local":false,"from":"code","paths":["tests/cors/registerGlobalCors.test.ts"]},{"host":"app.example.com","local":false,"from":"code","paths":["tests/responder/asyncSafety.test.ts"]},{"host":"b.com","local":false,"from":"code","paths":["tests/cors/preflight.test.ts"]},{"host":"eslint.org","local":false,"from":"code","paths":["package-lock.json"]},{"host":"evil.com","local":false,"from":"code","paths":["tests/cors/createCors.test.ts","tests/cors/preflight.test.ts","tests/cors/registerGlobalCors.test.ts"]},{"host":"example.com","local":false,"from":"code","paths":["tests/responder/moreResponses.test.ts"]},{"host":"facial.akwaabahr.com","local":false,"from":"code","paths":["tests/cors/createCors.test.ts","tests/responder/withResponder.integration.test.ts"]},{"host":"foo.com","local":false,"from":"code","paths":["tests/responder/createResponder.test.ts"]},{"host":"github.com","local":false,"from":"code","paths":["package-lock.json","package.json"]},{"host":"given.example.com","local":false,"from":"code","paths":["tests/responder/asyncSafety.test.ts"]},{"host":"header.example.com","local":false,"from":"code","paths":["tests/responder/asyncSafety.test.ts"]},{"host":"localhost","local":true,"from":"code","paths":["examples/auth-basic.ts","examples/auth-cache.ts","examples/auth-mixed.ts","examples/auth-policies.ts","examples/auth-token-schemes.ts"]},{"host":"localhost:3000","local":true,"from":"code","paths":[".github/workflows/ci.yml","examples/cors-global.ts","examples/cors-variant.ts","examples/docker/docker-compose.yml","examples/server.ts"]},{"host":"localhost:3009","local":true,"from":"code","paths":["examples/auth-token-schemes.ts"]},{"host":"localhost:3010","local":true,"from":"code","paths":["examples/router-app.ts"]},{"host":"localhost:5173","local":true,"from":"code","paths":["examples/cors-global.ts","examples/cors-variant.ts","examples/server.ts"]},{"host":"opencollective.com","local":false,"from":"code","paths":["package-lock.json"]},{"host":"paulmillr.com","local":false,"from":"code","paths":["package-lock.json"]},{"host":"registry.npmjs.org","local":false,"from":"code","paths":["package-lock.json"]},{"host":"tidelift.com","local":false,"from":"code","paths":["package-lock.json"]},{"host":"x.com","local":false,"from":"code","paths":["tests/integration/responder.int.test.ts"]},{"host":"app.example.com","local":false,"from":"docs","paths":["README.md"]},{"host":"github.com","local":false,"from":"docs","paths":["README.md"]},{"host":"keepachangelog.com","local":false,"from":"docs","paths":["CHANGELOG.md"]},{"host":"localhost:3000","local":true,"from":"docs","paths":["examples/docker/README.md"]},{"host":"semver.org","local":false,"from":"docs","paths":["CHANGELOG.md"]},{"host":"www.conventionalcommits.org","local":false,"from":"docs","paths":["CONTRIBUTING.md"]}],"env":[{"name":"COMPOSE_FILE","paths":[".github/workflows/ci.yml"]},{"name":"COOKIE_SECRET","paths":["README.md"]},{"name":"GH_TOKEN","paths":[".github/workflows/release.yml"]},{"name":"GITHUB_REF_NAME","paths":[".github/workflows/release.yml"]},{"name":"GITHUB_TOKEN","paths":[".github/workflows/release.yml"]},{"name":"OLD_COOKIE_SECRET","paths":["README.md"]},{"name":"PORT","paths":["examples/docker/docker-compose.yml","examples/env.ts"]},{"name":"TEMP_DIR","paths":["examples/env.ts"]}],"install_runs":false,"summary":"runs 2 workflows · talks to 26 hosts · links to 6 hosts in its docs · reads 8 environment variables · nothing runs at install"},"counts":{"blocking":0,"disclosed":547,"review":34},"advisories_refreshed_at":"2026-11-07T04:00:55.394Z"},"cadence_sentence":"One release so far.","originality":{"blob_overlap_ratio":0,"blobs_seen_elsewhere":0,"blobs_total":138,"nearest_listing":null,"derivative_of":null},"engineering":{"unique_5gram_ratio":0.444,"type_token_ratio":0.297,"effective_code_lines":4156,"effective_doc_words":3665,"code_files":119,"test_files":63,"padding_suspected":true,"class_note":"Capped at Pack: unique 5-gram ratio 0.444 is below the 0.6 guard."},"cadence":{"releases":1,"median_days_between_releases":null,"on_time_fraction":null,"days_since_last":0,"score":null,"finished":false},"inventory_sentence":"42 source files · 63 test files · 19 examples · 4 docs","extensions":{"js":1,"md":4,"ts":118,"yml":4,"json":5,"(none)":5,"example":1,"dockerignore":1},"lines_of_code":9365,"warnings":["sbom_unavailable"],"repo_meta":{"repo_id":1442761169,"name":"uws-boost","full_name":"DERRICK-TORKORNOO/uws-boost","description":"Lightweight TypeScript web framework and toolkit for building HTTP APIs on uWebSockets.js","homepage":null,"topics":[],"language":"TypeScript","default_branch":"main","size_kb":0,"created_at":"2026-11-02T09:29:28Z","pushed_at":"2026-11-02T09:31:26Z","licence_spdx":"MIT","open_issues":null,"stars":null,"forks":null,"watchers":null,"archived":false,"private":true,"html_url":null},"owner":{"login":"DERRICK-TORKORNOO","name":"MENSAH TORKORNOO DERRICK","avatar_url":"https://avatars.githubusercontent.com/u/116164431?v=4","bio":"I AM A FULL STACK WEB DEVELOPER","blog":null,"company":null,"location":null,"twitter_username":null,"followers":2,"public_repos":4,"created_at":"2022-10-19T10:30:05Z","html_url":"https://github.com/DERRICK-TORKORNOO"},"computed_at":"2026-11-02T09:34:01.734Z","analyzer_version":"0.1.0"},"self_reported":{"description":"Zero-dependency, high-performance HTTP toolkit and router for uWebSockets.js with native TypeScript support, validation, and request parsing.","trigger_hint":"When building lightning-fast Node.js microservices or APIs requiring maximum throughput and minimal overhead."}}