npmpackage.info

Gathering detailed insights and metrics for @grpc/grpc-js

Other packages similar to @grpc/grpc-js

@opentelemetry/instrumentation-grpc

0.200.0

OpenTelemetry instrumentation for `@grpc/grpc-js` rpc client and server for gRPC framework

@improbable-eng/grpc-web

0.15.0

gRPC-Web client for browsers (JS/TS)

@grpc/grpc-js-xds

1.13.0

Plugin for @grpc/grpc-js. Adds the xds:// URL scheme and associated features.

@injectivelabs/grpc-web

0.0.6

gRPC-Web client for browsers (JS/TS)

Gathering detailed insights and metrics for @grpc/grpc-js

@grpc/grpc-js - 1.13.3 | npmpackage.info

@grpc/grpc-js

gRPC for Node.js

1.13.3

4,643

Apache-2.0

TypeScript

95.29 kB

1,639,404,035 6.5

Installations

npm install @grpc/grpc-js

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=12.10.0

Node Version

18.16.1

NPM Version

9.5.1 Pull Requests

Open

10

Total

1,730

Closed

187

Merged

1,533

Issues

Open

198

Total

1,165

Closed

967

Releases

288

@grpc/proto-loader 0.7.15

@grpc/proto-loader@0.7.15

Updated on Apr 18, 2025

@grpc/proto-loader 0.7.14

@grpc/proto-loader@0.7.14

Updated on Apr 17, 2025

@grpc/grpc-js 1.13.3

@grpc/grpc-js@1.13.3

Updated on Apr 10, 2025

@grpc/grpc-js 1.13.2

@grpc/grpc-js@1.13.2

Updated on Mar 26, 2025

@grpc/grpc-js 1.13.1

@grpc/grpc-js@1.13.1

Updated on Mar 21, 2025

@grpc/grpc-js-xds 1.13.0

@grpc/grpc-js-xds@1.13.0

Updated on Mar 11, 2025

View All 288 releases

Languages

TypeScript

JavaScript

C++

Shell

Dockerfile

CMake

Batchfile

PowerShell

TypeScript (85.68%)

JavaScript (11.4%)

C++ (1.39%)

Shell (0.93%)

Dockerfile (0.24%)

CMake (0.13%)

Batchfile (0.12%)

PowerShell (0.1%)

Developer

grpc

Download Statistics

Total Downloads

1,639,404,035

Last Day

2,607,425

Last Week

14,002,909

Last Month

60,433,686

Last Year

599,822,673

GitHub Statistics

Apache-2.0 License

4,643 Stars

5,042 Commits

665 Forks

72 Watchers

51 Branches

188 Contributors

Updated on May 08, 2025

Bundle Size

362.64 kB

Minified

95.29 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 188 Contributors

Package Meta Information

Latest Version

1.13.3

Package Id

@grpc/grpc-js@1.13.3

Unpacked Size

1.88 MB

Size

351.70 kB

File Count

444

NPM Version

9.5.1

Node Version

18.16.1

Published on

Apr 10, 2025

Total Downloads

Cumulative downloads

Total Downloads

1,639,404,035

Last Day

37.2%

2,607,425

Compared to previous day

Last Week

1.9%

14,002,909

Compared to previous week

Last Month

-3.2%

60,433,686

Compared to previous month

Last Year

48.6%

599,822,673

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Pure JavaScript gRPC Client

Installation

Node 12 is recommended. The exact set of compatible Node versions can be found in the engines field of the package.json file.

1npm install @grpc/grpc-js

Documentation

Documentation specifically for the @grpc/grpc-js package is currently not available. However, documentation is available for the grpc package, and the two packages contain mostly the same interface. There are a few notable differences, however, and these differences are noted in the "Migrating from grpc" section below.

Features

Clients
Automatic reconnection
Servers
Streaming
Metadata
Partial compression support: clients can compress and decompress messages, and servers can decompress request messages
Pick first and round robin load balancing policies
Client Interceptors
Connection Keepalives
HTTP Connect support (proxies)

If you need a feature from the grpc package that is not provided by the @grpc/grpc-js, please file a feature request with that information.

This library does not directly handle .proto files. To use .proto files with this library we recommend using the @grpc/proto-loader package.

Migrating from `grpc`

@grpc/grpc-js is almost a drop-in replacement for grpc, but you may need to make a few code changes to use it:

If you are currently loading .proto files using grpc.load, that function is not available in this library. You should instead load your .proto files using @grpc/proto-loader and load the resulting package definition objects into @grpc/grpc-js using grpc.loadPackageDefinition.
If you are currently loading packages generated by grpc-tools, you should instead generate your files using the generate_package_definition option in grpc-tools, then load the object exported by the generated file into @grpc/grpc-js using grpc.loadPackageDefinition.
If you have a server and you are using Server#bind to bind ports, you will need to use Server#bindAsync instead.
If you are using any channel options supported in grpc but not supported in @grpc/grpc-js, you may need to adjust your code to handle the different behavior. Refer to the list of supported options below.
Refer to the detailed package comparison for more details on the differences between grpc and @grpc/grpc-js.

Supported Channel Options

Many channel arguments supported in grpc are not supported in @grpc/grpc-js. The channel arguments supported by @grpc/grpc-js are:

grpc.ssl_target_name_override
grpc.primary_user_agent
grpc.secondary_user_agent
grpc.default_authority
grpc.keepalive_time_ms
grpc.keepalive_timeout_ms
grpc.keepalive_permit_without_calls
grpc.service_config
grpc.max_concurrent_streams
grpc.initial_reconnect_backoff_ms
grpc.max_reconnect_backoff_ms
grpc.use_local_subchannel_pool
grpc.max_send_message_length
grpc.max_receive_message_length
grpc.enable_http_proxy
grpc.default_compression_algorithm
grpc.enable_channelz
grpc.dns_min_time_between_resolutions_ms
grpc.enable_retries
grpc.max_connection_age_ms
grpc.max_connection_age_grace_ms
grpc.max_connection_idle_ms
grpc.per_rpc_retry_buffer_size
grpc.retry_buffer_size
grpc.service_config_disable_resolution
grpc.client_idle_timeout_ms
grpc-node.max_session_memory
grpc-node.tls_enable_trace
grpc-node.retry_max_attempts_limit
grpc-node.flow_control_window
channelOverride
channelFactoryOverride

Some Notes on API Guarantees

The public API of this library follows semantic versioning, with some caveats:

Some methods are prefixed with an underscore. These methods are internal and should not be considered part of the public API.
The class Call is only exposed due to limitations of TypeScript. It should not be considered part of the public API.
In general, any API that is exposed by this library but is not exposed by the grpc library is likely an error and should not be considered part of the public API.
The grpc.experimental namespace contains APIs that have not stabilized. Any API in that namespace may break in any minor version update.

High

7.5/10

Summary

Prototype pollution in grpc and @grpc/grpc-js

Affected Versions

< 1.1.8

Patched Versions

1.1.8

Moderate

5.3/10

Summary

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

Affected Versions

< 1.8.22

Patched Versions

1.8.22

Moderate

5.3/10

Summary

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

Affected Versions

>= 1.9.0, < 1.9.15

Patched Versions

1.9.15

Moderate

5.3/10

Summary

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

Affected Versions

>= 1.10.0, < 1.10.9

Patched Versions

1.10.9

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

Security-Policy

Determines if the project has published a security policy.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/grpc-tools-build.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/grpc/grpc-node/grpc-tools-build.yml/master?enable=pin
Warn: containerImage not pinned by hash: packages/grpc-js-xds/interop/test-client.Dockerfile:19
Warn: containerImage not pinned by hash: packages/grpc-js-xds/interop/test-client.Dockerfile:36: pin your Docker image by updating gcr.io/distroless/nodejs18-debian11:latest to gcr.io/distroless/nodejs18-debian11:latest@sha256:c3627dd28e9e031c6b562eb7cb77c324b9c4635a1c05eaf8e89d2eaa364fa6f0
Warn: containerImage not pinned by hash: packages/grpc-js-xds/interop/test-server.Dockerfile:19
Warn: containerImage not pinned by hash: packages/grpc-js-xds/interop/test-server.Dockerfile:40: pin your Docker image by updating gcr.io/distroless/nodejs18-debian11:latest to gcr.io/distroless/nodejs18-debian11:latest@sha256:c3627dd28e9e031c6b562eb7cb77c324b9c4635a1c05eaf8e89d2eaa364fa6f0
Warn: containerImage not pinned by hash: tools/release/native/Dockerfile:6: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:67cadaff1dca187079fce41360d5a7eb6f7dcd3745e53c79ad5efd8563118240
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-client.Dockerfile:26
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-client.Dockerfile:28
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-client.Dockerfile:30
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-client.Dockerfile:32
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-client.Dockerfile:34
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-server.Dockerfile:26
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-server.Dockerfile:28
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-server.Dockerfile:30
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-server.Dockerfile:32
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/interop/test-server.Dockerfile:34
Warn: downloadThenRun not pinned by hash: tools/release/native/Dockerfile:23
Warn: downloadThenRun not pinned by hash: packages/grpc-js-xds/scripts/xds.sh:22
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/scripts/xds.sh:38
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/scripts/xds.sh:41
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/scripts/xds.sh:44
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/scripts/xds.sh:47
Warn: npmCommand not pinned by hash: packages/grpc-js-xds/scripts/xds.sh:52
Warn: downloadThenRun not pinned by hash: run-tests.sh:20
Warn: npmCommand not pinned by hash: run-tests.sh:42
Warn: npmCommand not pinned by hash: run-tests.sh:67
Warn: npmCommand not pinned by hash: setup_interop.sh:16
Warn: npmCommand not pinned by hash: setup_interop.sh:17
Warn: npmCommand not pinned by hash: setup_interop_purejs.sh:16
Warn: npmCommand not pinned by hash: setup_interop_purejs.sh:17
Warn: npmCommand not pinned by hash: test/client-libraries-integration/init.sh:16
Warn: npmCommand not pinned by hash: test/client-libraries-integration/init.sh:23
Warn: npmCommand not pinned by hash: test/distrib/run-distrib-test.sh:29
Warn: npmCommand not pinned by hash: test/distrib/run-distrib-test.sh:30
Warn: npmCommand not pinned by hash: test/distrib/run-distrib-test.sh:31
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 containerImage dependencies pinned
Info: 0 out of 26 npmCommand dependencies pinned
Info: 0 out of 3 downloadThenRun dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

6.5

/10

Last Scanned on 2025-05-05

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @grpc/grpc-js

Other packages similar to @grpc/grpc-js

@grpc/grpc-js

Installations

Developer Guide

Yes

CommonJS

>=12.10.0

18.16.1

9.5.1

Pull Requests

10

1,730

187

1,533

Issues

198

1,165

967

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

362.64 kB

95.29 kB

Maintainers

Package Meta Information

Total Downloads

1,639,404,035

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

Pure JavaScript gRPC Client

Installation

Documentation

Features

Migrating from grpc

Supported Channel Options

Some Notes on API Guarantees

10

10

10

10

10

10

9

0

0

0

0

0

6.5

/10

Migrating from `grpc`