← Back to npm / PyPI packages

Top npm and PyPI packages by weekly-download growth, 8 November 2026

The top 5 npm and PyPI packages by weekly-download growth over the 1-day window ending 8 November 2026, measured by RiseFinder.

Period
Daily
Window
1 day
Rows
5
Data through
8 November 2026
← All current risersAll npm and PyPI packages editionsNewer: 9 November 2026Older: 7 November 2026

At a glance

Rising npm and PyPI Packages: 8 November 2026: rank, name, readings and change
RankNameBefore → afterChange
1@andersmyrmel/vard103,230 → 123,562 weekly downloads+19.7%
2@chat-adapter/github214,426 → 226,548 weekly downloads+5.7%
3@dbx-app/mcp-server9,107 → 9,584 weekly downloads+5.2%
4@betteroffice/xlsx184,102 → 190,491 weekly downloads+3.5%
5@agentskit/memory13,804 → 14,278 weekly downloads+3.4%
01/

Daily box

5 entries
01

@andersmyrmel/vard

@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.

npm / PyPI packages

Open source ↗
+19.7%
103,230 → 123,562 weekly downloads
02

@chat-adapter/github

@chat-adapter/github is an npm package that provides a GitHub adapter for Chat SDK. It treats issue and pull request comments as messages and issues or pull requests as threads, letting a bot respond to @mentions in those comment threads. Configuration options are auto-detected from environment variables such as GITHUB_TOKEN, GITHUB_WEBHOOK_SECRET, and GITHUB_BOT_USERNAME, and it supports authentication via a personal access token, a GitHub App, or Vercel Connect.

npm / PyPI packages

Open source ↗
+5.7%
214,426 → 226,548 weekly downloads
03

@dbx-app/mcp-server

@dbx-app/mcp-server is an npm package that provides a Model Context Protocol (MCP) server for DBX, implemented in Rust. It lets MCP-compatible AI agents such as Claude Code and Cursor inspect database schemas and run database operations using connections configured in DBX. The package includes 18 MCP tools covering connection and database discovery, schemas, SQL, Redis, sessions, and messages, and offers local, web, and Docker modes through the same tool interface. It ships precompiled native binaries, so no local Rust build is required, and it can run via npx without global installation.

npm / PyPI packages

Open source ↗
+5.2%
9,107 → 9,584 weekly downloads
04

@betteroffice/xlsx

A software package providing a spreadsheet engine for XLSX files, compiled from Rust to WebAssembly and usable without a specific framework. It can open, render, edit, and save workbooks, either drawn onto a custom canvas or driven headlessly. Exported helpers cover hit-testing, viewport math, accessibility tree building, clipboard TSV conversion, styling, undo/redo, PNG export, and printing of ranges. It also supports AI agent edit proposals reviewed by humans, and version-checked edit batches.

npm / PyPI packages

Open source ↗
+3.5%
184,102 → 190,491 weekly downloads
05

@agentskit/memory

@agentskit/memory is an npm package that provides persistent conversation memory and vector search backends for AI agents built with AgentsKit. It offers chat memory backends such as file based JSON, SQLite, Redis, and Turso, plus vector memory adapters including Pinecone, Qdrant, pgvector, Chroma, Weaviate, Milvus, and MongoDB Atlas. Backends follow a shared VectorStore interface so they can be swapped without changing agent code.

npm / PyPI packages

Open source ↗
+3.4%
13,804 → 14,278 weekly downloads
This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.
02/

Get email updates

Join the list

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for RiseFinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.