← Back to npm / PyPI packages

npm / PyPI packages

The top 5 npm / pypi packages measured by RiseFinder over the 1d window ending 11 October 2026.

Period
Daily
Window
1d
Rows
5
Data through
11 October 2026
← All current risersAll npm / pypi packages editionsNewer: 12 October 2026Older: 10 October 2026
01/

Daily box

5 entries
01

@dbx-app/mcp-server

@dbx-app/mcp-server is an npm package that provides a Model Context Protocol (MCP) server for DBX, implemented in Rust. It lets MCP-compatible AI agents such as Claude Code and Cursor inspect database schemas and run database operations using connections configured in DBX. The package includes 18 MCP tools covering connection and database discovery, schemas, SQL, Redis, sessions, and messages, and offers local, web, and Docker modes through the same tool interface. It ships precompiled native binaries, so no local Rust build is required, and it can run via npx without global installation.

npm / PyPI packages

Open source ↗
+29.9%
7,137 → 9,272 weekly downloads
02

@framers/agentos

AgentOS is an open-source TypeScript framework for building autonomous AI agents, licensed under Apache-2.0. It provides persistent cognitive memory, runtime tool forging where an agent writes TypeScript functions that an LLM judge approves and run in a sandboxed node:vm environment, multi-agent orchestration, guardrails, a voice pipeline, and support for 11 LLM providers.

npm / PyPI packages

Open source ↗
+19.7%
13,212 → 15,810 weekly downloads
03

@betteroffice/docx

@betteroffice/docx is an npm package providing the framework-free core of the BetterOffice DOCX editor. It contains a Rust engine compiled to WebAssembly that handles OOXML parsing and serialization, CRDT-based editing, text shaping, and pagination, plus display-list, canvas-render, geometry, and accessibility helpers. Layout is computed without the DOM, with pages replayed onto canvas, and the package supports headless parsing, saving, and collaborative editing sessions.

npm / PyPI packages

Open source ↗
+17.8%
7,873 → 9,276 weekly downloads
04

@absolutejs/isolated-jsc

This npm package provides a JavaScriptCore-native sandbox for the Bun runtime, offering heap-isolated execution of untrusted JavaScript through an API shaped like Node's isolated-vm. It runs on two interchangeable backends: an FFI backend that talks directly to libJavaScriptCore, and a fallback Worker backend. Both provide heap isolation, wall-clock timeouts, and memory limits, and the package targets use cases such as AI agent code execution and multi-tenant scripting.

npm / PyPI packages

Open source ↗
+16.5%
540 → 629 weekly downloads
05

@andersmyrmel/vard

@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.

npm / PyPI packages

Open source ↗
+11.6%
24,196 → 27,008 weekly downloads
This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.
02/

Get email updates

Join the list

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for Risefinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.