npm / PyPI packages

The top 9 npm / pypi packages measured by RiseFinder over the 7d window ending Week 39 · 21 September 2026.

Period: Weekly
Window: 7d
Rows: 9
Data through: Week 39 · 21 September 2026

← All current risers All npm / pypi packages editions Newer: Week 40 · 28 September 2026 Older: Week 38 · 16 September 2026

01/

Weekly box

9 entries

@andersmyrmel/vard

@andersmyrmel/vard is a TypeScript library for prompt injection detection in LLM applications. It uses a Zod-inspired chainable API: you define security requirements and validate user input, receiving strongly typed, sanitized data for use in LLM prompts. Detection is pattern-based and covers categories such as system prompt leaks, encoding attacks, and obfuscation. It offers presets (strict, moderate, lenient) with configurable thresholds, and threat actions including block, sanitize, warn, and allow.

npm / PyPI packages

Open source ↗

+47.9%

12,950 → 19,151 weekly downloads

@cerbos/orm-prisma

@cerbos/orm-prisma is an npm package that acts as a Prisma adapter for Cerbos query plans. It takes a Cerbos Query Plan response from the PlanResources API and converts it into a Prisma where clause object, for use alongside projects using the Cerbos Javascript SDK. It supports logical, comparison, string, relation, hierarchy, and arithmetic operators, with unsupported cases throwing errors rather than producing wrong filters.

npm / PyPI packages

Open source ↗

+42.4%

9,949 → 14,163 weekly downloads

@embrace-io/react-native-navigation

@embrace-io/react-native-navigation is an npm package that provides a React Native wrapper for an OpenTelemetry Navigation instrumentation library, creating telemetry data representing navigation changes. It uses Embrace's React Native SDK and OpenTelemetry Tracer Provider to collect telemetry around navigation based on expo-router, @react-navigation/native, and react-native-navigation. Automatic tracking of native screens can be disabled through configuration on Android and iOS.

npm / PyPI packages

Open source ↗

+19.5%

6,062 → 7,244 weekly downloads

@embrace-io/react-native

@embrace-io/react-native is an npm package that provides a React Native wrapper for the Embrace SDK. Once integrated with an Embrace App ID and API token, it automatically gathers information to identify issues and measure performance, and lets teams add logs and user info for context and measure the timing of key app areas using spans. Setup can be done through an Expo config plugin, a setup script, or manual native changes, and the SDK can be initialized in JavaScript at the top level of an application.

npm / PyPI packages

Open source ↗

+18.9%

9,212 → 10,951 weekly downloads

@datastax/astra-db-ts

A TypeScript client library for interacting with DataStax Astra DB, a database service. Developers install it with a package manager, then use its API endpoint and application token to work with collections and tables through data and admin layer abstractions. It also supports non-Astra Data API backends such as Data API on DSE or HCD, offers configurable token providers, and can run with HTTP/2 via the fetch-h2 module.

npm / PyPI packages

Open source ↗

+16.2%

62,782 → 72,946 weekly downloads

@chat-adapter/x

@chat-adapter/x is an npm package that adapts the X (Twitter) platform for Chat SDK, using the X API v2 and the X Activity API. A bot built with it can reply to public mentions, hold direct message conversations, post from the bot account, and like posts, with encrypted XChat conversations available from the @chat-adapter/x/chat subpath. Setup involves creating an X app with OAuth 2.0 credentials and registering a webhook URL that receives events such as post.mention.create and dm.received.

npm / PyPI packages

Open source ↗

+12.7%

12,623 → 14,232 weekly downloads

@chat-adapter/messenger

@chat-adapter/messenger is an npm package that provides a Facebook Messenger adapter for Chat SDK, built on the Messenger Platform API. It handles webhooks, message templates, quick replies, attachments, read receipts, and message history for Messenger bots. Card elements are automatically converted into Messenger templates such as Generic and Button templates, and credentials can be auto-detected from environment variables.

npm / PyPI packages

Open source ↗

+9.6%

13,767 → 15,085 weekly downloads

@f5-sales-demo/xcsh-stats

@f5-sales-demo/xcsh-stats is an npm package providing a local observability dashboard for AI usage statistics. It parses JSONL session logs from ~/.xcsh/agent/sessions/, aggregates them into a SQLite database using bun:sqlite, and serves a web dashboard built with Chart.js showing metrics such as requests, cost, cache rate, error rate, duration and tokens per second, with per-model and per-folder breakdowns and auto-refresh every 30 seconds. It is MIT licensed.

npm / PyPI packages

Open source ↗

+6.3%

5,290 → 5,622 weekly downloads

@aikidosec/mcp

@aikidosec/mcp is a lightweight Model Context Protocol server that exposes Aikido's Code and Secrets Scan as a tool for AI coding agents and IDEs. It lets an agent scan code and returns machine-readable findings that can be triaged, fixed, or ignored. It requires Node.js 18.19.0 or newer and an Aikido account, and authenticates via browser sign-in or an AIKIDO_API_KEY environment variable.

npm / PyPI packages

Open source ↗

+6.2%

29,460 → 31,283 weekly downloads

This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for Risefinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.

npm / PyPI packages

Weekly box

Get email updates