← Back to npm / PyPI packages

npm / PyPI packages

The top 19 npm / pypi packages measured by RiseFinder over the 30d window ending November 2026.

Period: Monthly
Window: 30d
Rows: 19
Data through: November 2026

← All current risers All npm / pypi packages editions Older: October 2026

01/

Monthly box

19 entries

01

@betteroffice/xlsx

A software package providing a spreadsheet engine for XLSX files, compiled from Rust to WebAssembly and usable without a specific framework. It can open, render, edit, and save workbooks, either drawn onto a custom canvas or driven headlessly. Exported helpers cover hit-testing, viewport math, accessibility tree building, clipboard TSV conversion, styling, undo/redo, PNG export, and printing of ranges. It also supports AI agent edit proposals reviewed by humans, and version-checked edit batches.

npm / PyPI packages

Open source ↗

+6,709.4%

1,649 → 112,287 weekly downloads

02

@betteroffice/docx

@betteroffice/docx is an npm package providing the framework-free core of the BetterOffice DOCX editor. It contains a Rust engine compiled to WebAssembly that handles OOXML parsing and serialization, CRDT-based editing, text shaping, and pagination, plus display-list, canvas-render, geometry, and accessibility helpers. Layout is computed without the DOM, with pages replayed onto canvas, and the package supports headless parsing, saving, and collaborative editing sessions.

npm / PyPI packages

Open source ↗

+4,053.1%

2,720 → 112,964 weekly downloads

03

@agentskit/memory

@agentskit/memory is an npm package that provides persistent conversation memory and vector search backends for AI agents built with AgentsKit. It offers chat memory backends such as file based JSON, SQLite, Redis, and Turso, plus vector memory adapters including Pinecone, Qdrant, pgvector, Chroma, Weaviate, Milvus, and MongoDB Atlas. Backends follow a shared VectorStore interface so they can be swapped without changing agent code.

npm / PyPI packages

Open source ↗

+549.5%

1,338 → 8,690 weekly downloads

04

@agentskit/doc-bridge

@agentskit/doc-bridge is a TypeScript npm package and CLI (ak-docs) that turns repository documentation into structured handoffs for coding agents. It reads repo docs, an ownership map, and a human documentation site, then reports where to start reading, which files or packages may be edited, which checks prove a change, and which human docs explain the feature. The core works without any LLM or API key, and an audit command compares declared documentation and ownership against the observed project graph, reporting findings such as missing coverage, stale relations, and duplicates.

npm / PyPI packages

Open source ↗

+457.7%

1,491 → 8,315 weekly downloads

05

@framers/agentos

AgentOS is an open-source TypeScript framework for building autonomous AI agents, licensed under Apache-2.0. It provides persistent cognitive memory, runtime tool forging where an agent writes TypeScript functions that an LLM judge approves and run in a sandboxed node:vm environment, multi-agent orchestration, guardrails, a voice pipeline, and support for 11 LLM providers.

npm / PyPI packages

Open source ↗

+237%

2,638 → 8,889 weekly downloads

06

@chat-adapter/x

@chat-adapter/x is an npm package that adapts the X (Twitter) platform for Chat SDK, using the X API v2 and the X Activity API. A bot built with it can reply to public mentions, hold direct message conversations, post from the bot account, and like posts, with encrypted XChat conversations available from the @chat-adapter/x/chat subpath. Setup involves creating an X app with OAuth 2.0 credentials and registering a webhook URL that receives events such as post.mention.create and dm.received.

npm / PyPI packages

Open source ↗

+100.5%

55,354 → 110,992 weekly downloads

07

@aikidosec/mcp

@aikidosec/mcp is a lightweight Model Context Protocol server that exposes Aikido's Code and Secrets Scan as a tool for AI coding agents and IDEs. It lets an agent scan code and returns machine-readable findings that can be triaged, fixed, or ignored. It requires Node.js 18.19.0 or newer and an Aikido account, and authenticates via browser sign-in or an AIKIDO_API_KEY environment variable.

npm / PyPI packages

Open source ↗

+89.2%

38,951 → 73,687 weekly downloads

08

@andersmyrmel/vard

@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.

npm / PyPI packages

Open source ↗

+79.7%

36,287 → 65,195 weekly downloads

09

@braintrust/pi-extension

@braintrust/pi-extension is an npm package that adds tracing of Pi sessions to Braintrust. It records spans for sessions, turns, LLM calls, tool executions, compactions, and branch summaries, including token usage, cache usage, estimated cost, and time to first token. The extension sends events to the local bt daemon, which builds and uploads traces, and Pi keeps running if tracing fails.

npm / PyPI packages

Open source ↗

+79.6%

7,424 → 13,335 weekly downloads

10

@fastify/basic-auth

@fastify/basic-auth is an npm package that provides a Basic authentication plugin for the Fastify web framework. It calls a developer-supplied validate function on each request, passing the username, password, request, and reply, and accepts validation via a done callback, a promise, or async/await. Options include authenticate to add the WWW-Authenticate header with an optional realm, proxyMode to use Proxy-Authorization and 407 responses, and a header option to choose which header credentials come from. It is licensed under MIT.

npm / PyPI packages

Open source ↗

+43.9%

196,399 → 282,618 weekly downloads

11

@brizz/sdk

@brizz/sdk is an npm package that provides an OpenTelemetry-based observability SDK for AI applications, built by Brizz. Developers initialize it in their application and pass in the AI libraries they use, such as OpenAI, Anthropic, LangChain, LlamaIndex, and vector databases, and the SDK traces those libraries with standards-compliant tracing, metrics, and logs. It also offers optional PII masking, session tracking, custom events and logging, and works across ESM, CommonJS, bundlers, and tsx.

npm / PyPI packages

Open source ↗

+42.1%

13,046 → 18,533 weekly downloads

12

@aparajita/capacitor-biometric-auth

@aparajita/capacitor-biometric-auth is a Capacitor plugin that gives apps access to native biometric authentication and device credential APIs on iOS and Android. It supports every type of biometry and every configuration option on both platforms, and includes functions such as checkBiometry() to inspect what biometry or device credentials are available on a device. On the web, biometry and device credentials are simulated so developers can test their logic without code changes.

npm / PyPI packages

Open source ↗

+37.8%

284,572 → 392,186 weekly downloads

13

@chat-adapter/github

@chat-adapter/github is an npm package that provides a GitHub adapter for Chat SDK. It treats issue and pull request comments as messages and issues or pull requests as threads, letting a bot respond to @mentions in those comment threads. Configuration options are auto-detected from environment variables such as GITHUB_TOKEN, GITHUB_WEBHOOK_SECRET, and GITHUB_BOT_USERNAME, and it supports authentication via a personal access token, a GitHub App, or Vercel Connect.

npm / PyPI packages

Open source ↗

+37.7%

145,114 → 199,753 weekly downloads

14

@atjsh/llmlingua-2

@atjsh/llmlingua-2 is a JavaScript and TypeScript implementation of LLMLingua-2, a prompt compression method originally developed in Python by Microsoft. Ported by atjsh, it compresses context prompts using BERT-sized models and is designed to run in web browsers and Node.js environments, with optional WebGPU hardware acceleration. It depends on the @huggingface/transformers and js-tiktoken libraries.

npm / PyPI packages

Open source ↗

+30.7%

69,678 → 91,047 weekly downloads

15

@adonisjs/otel

@adonisjs/otel is an npm package providing OpenTelemetry integration for the AdonisJS web framework. It offers distributed tracing, metrics and automatic instrumentation with a zero-config setup and sensible defaults. The package is open-sourced under the MIT license, and its documentation is available on the AdonisJS website.

npm / PyPI packages

Open source ↗

+30.4%

15,275 → 19,919 weekly downloads

16

@dash0/sdk-web

@dash0/sdk-web is a Web SDK from Dash0 that instruments a website or single-page application to capture and transmit telemetry to Dash0. Its features include page view and navigation timing instrumentation, HTTP request instrumentation for fetch and XMLHttpRequest, error tracking, and optional session replay with rrweb shipped as a separate bundle. Setup requires a Dash0 account, the OTLP via HTTP endpoint URL for the region, and an auth token with Ingesting permissions for the dataset.

npm / PyPI packages

Open source ↗

+27.2%

147,715 → 187,944 weekly downloads

17

@beads/bd

@beads/bd is an npm package that installs the native bd binary for Node.js environments. The binary runs Beads, an issue tracker designed for AI coding agents that works as a graph-based memory system. Agents can create and track issues, manage four dependency types (blocks, related, parent-child, discovered-from), find issues with no open blockers using bd ready, and keep context across sessions. Data is stored in a Dolt database with full history and branching, and the package supports macOS, Linux, and Windows.

npm / PyPI packages

Open source ↗

+25.6%

10,094 → 12,679 weekly downloads

18

@convex-dev/better-auth

@convex-dev/better-auth is an npm package that provides a Better Auth component for Convex, allowing developers to use Better Auth with Convex. It includes built-in email and password authentication with session and account management, social sign-on through multiple OAuth providers such as GitHub, Google, Discord, and Twitter, and two factor authentication. The package supports popular frameworks including React, Vue, Svelte, Astro, Solid, Next.js, Nuxt, Tanstack Start, and Hono.

npm / PyPI packages

Open source ↗

+22.9%

313,701 → 385,531 weekly downloads

19

@chat-adapter/discord

@chat-adapter/discord is an npm package that provides a Discord adapter for Chat SDK, a toolkit for building chat bots. It supports two ways of receiving Discord events: HTTP Interactions, which handle slash commands, button clicks, and verification pings and work with serverless environments, and a Gateway WebSocket connection, which is required to receive regular messages and reactions. Configuration options such as the bot token, application ID, and public key can be auto-detected from environment variables, and credentials can also be resolved through Vercel Connect.

npm / PyPI packages

Open source ↗

+20.7%

267,780 → 323,310 weekly downloads

This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for Risefinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.