← Back to npm / PyPI packages

Top npm and PyPI packages by weekly-download growth, 6 November 2026

The top 5 npm and PyPI packages by weekly-download growth over the 1-day window ending 6 November 2026, measured by RiseFinder.

Period
Daily
Window
1 day
Rows
5
Data through
6 November 2026
← All current risersAll npm and PyPI packages editionsNewer: 7 November 2026Older: 5 November 2026

At a glance

Rising npm and PyPI Packages: 6 November 2026: rank, name, readings and change
RankNameBefore → afterChange
1@andersmyrmel/vard61,154 → 81,055 weekly downloads+32.5%
2@brizz/sdk23,421 → 25,861 weekly downloads+10.4%
3@clawdbot/lobster194,923 → 213,446 weekly downloads+9.5%
4@adonisjs/otel23,353 → 25,517 weekly downloads+9.3%
5@beads/bd12,130 → 13,195 weekly downloads+8.8%
01/

Daily box

5 entries
01

@andersmyrmel/vard

@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.

npm / PyPI packages

Open source ↗
+32.5%
61,154 → 81,055 weekly downloads
02

@brizz/sdk

@brizz/sdk is an npm package that provides an OpenTelemetry-based observability SDK for AI applications, built by Brizz. Developers initialize it in their application and pass in the AI libraries they use, such as OpenAI, Anthropic, LangChain, LlamaIndex, and vector databases, and the SDK traces those libraries with standards-compliant tracing, metrics, and logs. It also offers optional PII masking, session tracking, custom events and logging, and works across ESM, CommonJS, bundlers, and tsx.

npm / PyPI packages

Open source ↗
+10.4%
23,421 → 25,861 weekly downloads
03

@clawdbot/lobster

Lobster is an npm package providing a workflow runtime for AI agents, described as an OpenClaw-native workflow shell with typed, JSON-first pipelines and approval gates. Users define workflows in files containing shell commands, native pipeline steps, and explicit approval or input gates, which OpenClaw presents to the user before resuming with their decision. It includes commands for running OS commands, shaping data, rendering output as JSON or tables, and an approve command for approval gates, and requires Node.js 22 or newer.

npm / PyPI packages

Open source ↗
+9.5%
194,923 → 213,446 weekly downloads
04

@adonisjs/otel

@adonisjs/otel is an npm package providing OpenTelemetry integration for the AdonisJS web framework. It offers distributed tracing, metrics and automatic instrumentation with a zero-config setup and sensible defaults. The package is open-sourced under the MIT license, and its documentation is available on the AdonisJS website.

npm / PyPI packages

Open source ↗
+9.3%
23,353 → 25,517 weekly downloads
05

@beads/bd

@beads/bd is an npm package that installs the native bd binary for Node.js environments. The binary runs Beads, an issue tracker designed for AI coding agents that works as a graph-based memory system. Agents can create and track issues, manage four dependency types (blocks, related, parent-child, discovered-from), find issues with no open blockers using bd ready, and keep context across sessions. Data is stored in a Dolt database with full history and branching, and the package supports macOS, Linux, and Windows.

npm / PyPI packages

Open source ↗
+8.8%
12,130 → 13,195 weekly downloads
This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.
02/

Get email updates

Join the list

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for RiseFinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.