The top 5 npm and PyPI packages by weekly-download growth over the 1-day window ending 9 November 2026, measured by RiseFinder.
| Rank | Name | Before → after | Change |
|---|---|---|---|
| 1 | @chonkiejs/chunk | 24,711 → 29,243 weekly downloads | +18.3% |
| 2 | @copilotkit/aimock | 534,834 → 576,650 weekly downloads | +7.8% |
| 3 | @dbx-app/mcp-server | 9,584 → 10,072 weekly downloads | +5.1% |
| 4 | @andersmyrmel/vard | 123,562 → 128,616 weekly downloads | +4.1% |
| 5 | @braintrust/pi-extension | 6,973 → 7,177 weekly downloads | +2.9% |
@chonkiejs/chunk is an npm package that provides semantic text chunking, splitting text at boundaries such as periods and newlines. Callers pass in strings and receive strings back, or pass Uint8Array binary data and receive Uint8Array views back for zero-copy handling. The package is dual licensed under the Apache License, Version 2.0 or the MIT license.
npm / PyPI packages
Open source ↗aimock is a mock infrastructure for testing AI applications. Developers point their SDK at one local port and the tool answers requests deterministically across many AI services, including LLM APIs, image generation and editing, text-to-speech, transcription, video generation, embeddings, vector databases, search, and moderation. It supports record and replay of real API responses as fixtures, multi-turn conversations, chaos testing with configurable error rates, and a request journal, running as one package with zero dependencies and no network access.
npm / PyPI packages
Open source ↗@dbx-app/mcp-server is an npm package that provides a Model Context Protocol (MCP) server for DBX, implemented in Rust. It lets MCP-compatible AI agents such as Claude Code and Cursor inspect database schemas and run database operations using connections configured in DBX. The package includes 18 MCP tools covering connection and database discovery, schemas, SQL, Redis, sessions, and messages, and offers local, web, and Docker modes through the same tool interface. It ships precompiled native binaries, so no local Rust build is required, and it can run via npx without global installation.
npm / PyPI packages
Open source ↗@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.
npm / PyPI packages
Open source ↗@braintrust/pi-extension is an npm package that adds tracing of Pi sessions to Braintrust. It records spans for sessions, turns, LLM calls, tool executions, compactions, and branch summaries, including token usage, cache usage, estimated cost, and time to first token. The extension sends events to the local bt daemon, which builds and uploads traces, and Pi keeps running if tracing fails.
npm / PyPI packages
Open source ↗Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for RiseFinder email briefings.
By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.
Want a sample first? Read past daily emails.