← Back to npm / PyPI packages

npm / PyPI packages

The top 5 npm / pypi packages measured by RiseFinder over the 1d window ending 28 October 2026.

Period
Daily
Window
1d
Rows
5
Data through
28 October 2026
← All current risersAll npm / pypi packages editionsNewer: 29 October 2026Older: 27 October 2026
01/

Daily box

5 entries
01

@andersmyrmel/vard

@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.

npm / PyPI packages

Open source ↗
+538.4%
6,100 → 38,942 weekly downloads
02

@chat-adapter/github

@chat-adapter/github is an npm package that provides a GitHub adapter for Chat SDK. It treats issue and pull request comments as messages and issues or pull requests as threads, letting a bot respond to @mentions in those comment threads. Configuration options are auto-detected from environment variables such as GITHUB_TOKEN, GITHUB_WEBHOOK_SECRET, and GITHUB_BOT_USERNAME, and it supports authentication via a personal access token, a GitHub App, or Vercel Connect.

npm / PyPI packages

Open source ↗
+508%
25,819 → 156,968 weekly downloads
03

@agentskit/doc-bridge

@agentskit/doc-bridge is a TypeScript npm package and CLI (ak-docs) that turns repository documentation into structured handoffs for coding agents. It reads repo docs, an ownership map, and a human documentation site, then reports where to start reading, which files or packages may be edited, which checks prove a change, and which human docs explain the feature. The core works without any LLM or API key, and an audit command compares declared documentation and ownership against the observed project graph, reporting findings such as missing coverage, stale relations, and duplicates.

npm / PyPI packages

Open source ↗
+469.6%
737 → 4,198 weekly downloads
04

@convex-dev/rag

@convex-dev/rag is a Convex component for retrieval-augmented generation. It chunks and embeds documents, then runs vector-based semantic search to build context for LLMs. It supports adding or replacing content, organizing content into namespaces for per-user search, custom filtering with indexed fields, importance weighting, retrieving surrounding chunks for context, and migrating content or namespaces without disruption.

npm / PyPI packages

Open source ↗
+309.4%
25,810 → 105,675 weekly downloads
05

@chat-adapter/discord

@chat-adapter/discord is an npm package that provides a Discord adapter for Chat SDK, a toolkit for building chat bots. It supports two ways of receiving Discord events: HTTP Interactions, which handle slash commands, button clicks, and verification pings and work with serverless environments, and a Gateway WebSocket connection, which is required to receive regular messages and reactions. Configuration options such as the bot token, application ID, and public key can be auto-detected from environment variables, and credentials can also be resolved through Vercel Connect.

npm / PyPI packages

Open source ↗
+241.1%
63,781 → 217,565 weekly downloads
This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.
02/

Get email updates

Join the list

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for Risefinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.