← Back to npm / PyPI packages

npm / PyPI packages

The top 20 npm / pypi packages measured by RiseFinder over the 30d window ending October 2026.

Period: Monthly
Window: 30d
Rows: 20
Data through: October 2026

← All current risers All npm / pypi packages editions Older: September 2026

01/

Monthly box

20 entries

01

@f5-sales-demo/xcsh-stats

@f5-sales-demo/xcsh-stats is an npm package providing a local observability dashboard for AI usage statistics. It parses JSONL session logs from ~/.xcsh/agent/sessions/, aggregates them into a SQLite database using bun:sqlite, and serves a web dashboard built with Chart.js showing metrics such as requests, cost, cache rate, error rate, duration and tokens per second, with per-model and per-folder breakdowns and auto-refresh every 30 seconds. It is MIT licensed.

npm / PyPI packages

Open source ↗

+923.9%

1,088 → 11,140 weekly downloads

02

@chat-adapter/messenger

@chat-adapter/messenger is an npm package that provides a Facebook Messenger adapter for Chat SDK, built on the Messenger Platform API. It handles webhooks, message templates, quick replies, attachments, read receipts, and message history for Messenger bots. Card elements are automatically converted into Messenger templates such as Generic and Button templates, and credentials can be auto-detected from environment variables.

npm / PyPI packages

Open source ↗

+242.4%

12,849 → 43,991 weekly downloads

03

@bivy/bivy

@bivy/bivy is an open-source, self-hostable remote development environment for running coding agents on machines you own. It connects your repos, tools, and agents to chat, a terminal, app previews, and code review from a phone or browser. Its workflow is to ask an agent for a change, open a live preview of the running app, mark up what needs fixing, and send that feedback back to the agent in the same session. Preview links can be shared so others can try the app and leave notes.

npm / PyPI packages

Open source ↗

+222.3%

8,874 → 28,604 weekly downloads

04

@framers/agentos

AgentOS is an open-source TypeScript framework for building autonomous AI agents, licensed under Apache-2.0. It provides persistent cognitive memory, runtime tool forging where an agent writes TypeScript functions that an LLM judge approves and run in a sandboxed node:vm environment, multi-agent orchestration, guardrails, a voice pipeline, and support for 11 LLM providers.

npm / PyPI packages

Open source ↗

+210%

657 → 2,037 weekly downloads

05

@chat-adapter/x

@chat-adapter/x is an npm package that adapts the X (Twitter) platform for Chat SDK, using the X API v2 and the X Activity API. A bot built with it can reply to public mentions, hold direct message conversations, post from the bot account, and like posts, with encrypted XChat conversations available from the @chat-adapter/x/chat subpath. Setup involves creating an X app with OAuth 2.0 credentials and registering a webhook URL that receives events such as post.mention.create and dm.received.

npm / PyPI packages

Open source ↗

+197.3%

13,887 → 41,292 weekly downloads

06

@chat-adapter/github

@chat-adapter/github is an npm package that provides a GitHub adapter for Chat SDK. It treats issue and pull request comments as messages and issues or pull requests as threads, letting a bot respond to @mentions in those comment threads. Configuration options are auto-detected from environment variables such as GITHUB_TOKEN, GITHUB_WEBHOOK_SECRET, and GITHUB_BOT_USERNAME, and it supports authentication via a personal access token, a GitHub App, or Vercel Connect.

npm / PyPI packages

Open source ↗

+194.4%

46,817 → 137,812 weekly downloads

07

@chonkiejs/chunk

@chonkiejs/chunk is an npm package that provides semantic text chunking, splitting text at boundaries such as periods and newlines. Callers pass in strings and receive strings back, or pass Uint8Array binary data and receive Uint8Array views back for zero-copy handling. The package is dual licensed under the Apache License, Version 2.0 or the MIT license.

npm / PyPI packages

Open source ↗

+135.1%

15,422 → 36,253 weekly downloads

08

@earendil-works/pi-telemetry

@earendil-works/pi-telemetry is an npm package providing vendor-neutral telemetry contracts and typed schema utilities for pi packages. It defines an explicit, callback-based TelemetryContext and TelemetrySpan contract, a shared NOOP_TELEMETRY_CONTEXT, and an InMemoryTelemetryContext reference implementation for tests and local diagnostics. Applications can use the in-memory reference or provide an adapter for backends such as OpenTelemetry, Sentry, or logs. It also offers serializable schema definitions with inferred TypeScript types and has no dependency on a telemetry backend.

npm / PyPI packages

Open source ↗

+127.7%

2,076,190 → 4,727,884 weekly downloads

09

@chat-adapter/discord

@chat-adapter/discord is an npm package that provides a Discord adapter for Chat SDK, a toolkit for building chat bots. It supports two ways of receiving Discord events: HTTP Interactions, which handle slash commands, button clicks, and verification pings and work with serverless environments, and a Gateway WebSocket connection, which is required to receive regular messages and reactions. Configuration options such as the bot token, application ID, and public key can be auto-detected from environment variables, and credentials can also be resolved through Vercel Connect.

npm / PyPI packages

Open source ↗

+113.7%

120,458 → 257,363 weekly downloads

10

@beads/bd

@beads/bd is an npm package that installs the native bd binary for Node.js environments. The binary runs Beads, an issue tracker designed for AI coding agents that works as a graph-based memory system. Agents can create and track issues, manage four dependency types (blocks, related, parent-child, discovered-from), find issues with no open blockers using bd ready, and keep context across sessions. Data is stored in a Dolt database with full history and branching, and the package supports macOS, Linux, and Windows.

npm / PyPI packages

Open source ↗

+70.6%

6,060 → 10,338 weekly downloads

11

@andersmyrmel/vard

@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.

npm / PyPI packages

Open source ↗

+64.7%

20,220 → 33,301 weekly downloads

12

@earendil-works/pi-coding-agent

@earendil-works/pi-coding-agent is an npm package that provides Pi, a coding agent command-line interface for the terminal. It includes read, bash, edit, and write tools along with session management. Users can customize it with prompt templates, skills, extensions, and themes, automate it in print, JSON, or RPC mode, or build applications with a TypeScript SDK. It requires Node.js 22.19 or newer and is MIT licensed.

npm / PyPI packages

Open source ↗

+62.7%

2,652,950 → 4,316,299 weekly downloads

13

@convex-dev/better-auth

@convex-dev/better-auth is an npm package that provides a Better Auth component for Convex, allowing developers to use Better Auth with Convex. It includes built-in email and password authentication with session and account management, social sign-on through multiple OAuth providers such as GitHub, Google, Discord, and Twitter, and two factor authentication. The package supports popular frameworks including React, Vue, Svelte, Astro, Solid, Next.js, Nuxt, Tanstack Start, and Hono.

npm / PyPI packages

Open source ↗

+56.2%

192,441 → 300,516 weekly downloads

14

@aikidosec/mcp

@aikidosec/mcp is a lightweight Model Context Protocol server that exposes Aikido's Code and Secrets Scan as a tool for AI coding agents and IDEs. It lets an agent scan code and returns machine-readable findings that can be triaged, fixed, or ignored. It requires Node.js 18.19.0 or newer and an Aikido account, and authenticates via browser sign-in or an AIKIDO_API_KEY environment variable.

npm / PyPI packages

Open source ↗

+35.3%

28,782 → 38,951 weekly downloads

15

@dbx-app/mcp-server

@dbx-app/mcp-server is an npm package that provides a Model Context Protocol (MCP) server for DBX, implemented in Rust. It lets MCP-compatible AI agents such as Claude Code and Cursor inspect database schemas and run database operations using connections configured in DBX. The package includes 18 MCP tools covering connection and database discovery, schemas, SQL, Redis, sessions, and messages, and offers local, web, and Docker modes through the same tool interface. It ships precompiled native binaries, so no local Rust build is required, and it can run via npx without global installation.

npm / PyPI packages

Open source ↗

+31.4%

9,554 → 12,551 weekly downloads

16

@brizz/sdk

@brizz/sdk is an npm package that provides an OpenTelemetry-based observability SDK for AI applications, built by Brizz. Developers initialize it in their application and pass in the AI libraries they use, such as OpenAI, Anthropic, LangChain, LlamaIndex, and vector databases, and the SDK traces those libraries with standards-compliant tracing, metrics, and logs. It also offers optional PII masking, session tracking, custom events and logging, and works across ESM, CommonJS, bundlers, and tsx.

npm / PyPI packages

Open source ↗

+28.8%

10,091 → 12,997 weekly downloads

17

@embrace-io/react-native

@embrace-io/react-native is an npm package that provides a React Native wrapper for the Embrace SDK. Once integrated with an Embrace App ID and API token, it automatically gathers information to identify issues and measure performance, and lets teams add logs and user info for context and measure the timing of key app areas using spans. Setup can be done through an Expo config plugin, a setup script, or manual native changes, and the SDK can be initialized in JavaScript at the top level of an application.

npm / PyPI packages

Open source ↗

+23.7%

10,566 → 13,073 weekly downloads

18

@embrace-io/react-native-navigation

@embrace-io/react-native-navigation is an npm package that provides a React Native wrapper for an OpenTelemetry Navigation instrumentation library, creating telemetry data representing navigation changes. It uses Embrace's React Native SDK and OpenTelemetry Tracer Provider to collect telemetry around navigation based on expo-router, @react-navigation/native, and react-native-navigation. Automatic tracking of native screens can be disabled through configuration on Android and iOS.

npm / PyPI packages

Open source ↗

+22.4%

9,101 → 11,144 weekly downloads

19

@adonisjs/otel

@adonisjs/otel is an npm package providing OpenTelemetry integration for the AdonisJS web framework. It offers distributed tracing, metrics and automatic instrumentation with a zero-config setup and sensible defaults. The package is open-sourced under the MIT license, and its documentation is available on the AdonisJS website.

npm / PyPI packages

Open source ↗

+20.4%

11,964 → 14,409 weekly downloads

20

@aparajita/capacitor-biometric-auth

@aparajita/capacitor-biometric-auth is a Capacitor plugin that gives apps access to native biometric authentication and device credential APIs on iOS and Android. It supports every type of biometry and every configuration option on both platforms, and includes functions such as checkBiometry() to inspect what biometry or device credentials are available on a device. On the web, biometry and device credentials are simulated so developers can test their logic without code changes.

npm / PyPI packages

Open source ↗

+18.8%

231,582 → 275,027 weekly downloads

This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for Risefinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.