npm / PyPI packages

The top 10 npm / pypi packages measured by RiseFinder over the 7d window ending Week 44 · 26 October 2026.

Period: Weekly
Window: 7d
Rows: 10
Data through: Week 44 · 26 October 2026

← All current risers All npm / pypi packages editions Older: Week 43 · 19 October 2026

01/

Weekly box

10 entries

@chat-adapter/github

@chat-adapter/github is an npm package that provides a GitHub adapter for Chat SDK. It treats issue and pull request comments as messages and issues or pull requests as threads, letting a bot respond to @mentions in those comment threads. Configuration options are auto-detected from environment variables such as GITHUB_TOKEN, GITHUB_WEBHOOK_SECRET, and GITHUB_BOT_USERNAME, and it supports authentication via a personal access token, a GitHub App, or Vercel Connect.

npm / PyPI packages

Open source ↗

+63.7%

74,161 → 121,377 weekly downloads

@betteroffice/docx

@betteroffice/docx is an npm package providing the framework-free core of the BetterOffice DOCX editor. It contains a Rust engine compiled to WebAssembly that handles OOXML parsing and serialization, CRDT-based editing, text shaping, and pagination, plus display-list, canvas-render, geometry, and accessibility helpers. Layout is computed without the DOM, with pages replayed onto canvas, and the package supports headless parsing, saving, and collaborative editing sessions.

npm / PyPI packages

Open source ↗

+43.1%

14,213 → 20,343 weekly downloads

@aikidosec/mcp

@aikidosec/mcp is a lightweight Model Context Protocol server that exposes Aikido's Code and Secrets Scan as a tool for AI coding agents and IDEs. It lets an agent scan code and returns machine-readable findings that can be triaged, fixed, or ignored. It requires Node.js 18.19.0 or newer and an Aikido account, and authenticates via browser sign-in or an AIKIDO_API_KEY environment variable.

npm / PyPI packages

Open source ↗

+41.2%

35,229 → 49,734 weekly downloads

@chat-adapter/x

@chat-adapter/x is an npm package that adapts the X (Twitter) platform for Chat SDK, using the X API v2 and the X Activity API. A bot built with it can reply to public mentions, hold direct message conversations, post from the bot account, and like posts, with encrypted XChat conversations available from the @chat-adapter/x/chat subpath. Setup involves creating an X app with OAuth 2.0 credentials and registering a webhook URL that receives events such as post.mention.create and dm.received.

npm / PyPI packages

Open source ↗

+28%

47,527 → 60,851 weekly downloads

@datastax/astra-db-ts

A TypeScript client library for interacting with DataStax Astra DB, a database service. Developers install it with a package manager, then use its API endpoint and application token to work with collections and tables through data and admin layer abstractions. It also supports non-Astra Data API backends such as Data API on DSE or HCD, offers configurable token providers, and can run with HTTP/2 via the fetch-h2 module.

npm / PyPI packages

Open source ↗

+24.9%

31,113 → 38,861 weekly downloads

@clipboard-health/playwright-reporter-llm

An npm package that is a Playwright test reporter producing structured JSON output intended for LLM agents. It emits minimal console output with a flat schema that is easy to filter to failures. Reports include per-test error messages, diffs, failure locations, retry attempt histories, console entries, and a three-layer network report separating request instances, shared groups, and bodies, with a timeline of events sorted by offsetMs for reconstructing failures.

npm / PyPI packages

Open source ↗

+21.1%

2,155 → 2,610 weekly downloads

@fastify/basic-auth

@fastify/basic-auth is an npm package that provides a Basic authentication plugin for the Fastify web framework. It calls a developer-supplied validate function on each request, passing the username, password, request, and reply, and accepts validation via a done callback, a promise, or async/await. Options include authenticate to add the WWW-Authenticate header with an optional realm, proxyMode to use Proxy-Authorization and 407 responses, and a header option to choose which header credentials come from. It is licensed under MIT.

npm / PyPI packages

Open source ↗

+16.9%

97,578 → 114,039 weekly downloads

@betteroffice/xlsx

A software package providing a spreadsheet engine for XLSX files, compiled from Rust to WebAssembly and usable without a specific framework. It can open, render, edit, and save workbooks, either drawn onto a custom canvas or driven headlessly. Exported helpers cover hit-testing, viewport math, accessibility tree building, clipboard TSV conversion, styling, undo/redo, PNG export, and printing of ranges. It also supports AI agent edit proposals reviewed by humans, and version-checked edit batches.

npm / PyPI packages

Open source ↗

+14.6%

14,280 → 16,358 weekly downloads

@convex-dev/rag

@convex-dev/rag is a Convex component for retrieval-augmented generation. It chunks and embeds documents, then runs vector-based semantic search to build context for LLMs. It supports adding or replacing content, organizing content into namespaces for per-user search, custom filtering with indexed fields, importance weighting, retrieving surrounding chunks for context, and migrating content or namespaces without disruption.

npm / PyPI packages

Open source ↗

+14.1%

58,316 → 66,525 weekly downloads

@aparajita/capacitor-biometric-auth

@aparajita/capacitor-biometric-auth is a Capacitor plugin that gives apps access to native biometric authentication and device credential APIs on iOS and Android. It supports every type of biometry and every configuration option on both platforms, and includes functions such as checkBiometry() to inspect what biometry or device credentials are available on a device. On the web, biometry and device credentials are simulated so developers can test their logic without code changes.

npm / PyPI packages

Open source ↗

+13.3%

166,336 → 188,452 weekly downloads

This dated edition is generated from the reviewed RiseFinder export. Movement figures retain their original source, period and direction.

Get early signals on the websites, apps, repositories and startups gaining momentum. Join the list for Risefinder email briefings.

By subscribing, you ask us to store your email and send Risefinder updates. You can unsubscribe at any time. Privacy.

Want a sample first? Read past daily emails.

npm / PyPI packages

Weekly box

Get email updates