npmpackage.info

Gathering detailed insights and metrics for @trpc/server

Other packages similar to @trpc/server

@leight/trpc-server

0.5.72

Set of utils for tRPC server-side.

@hono/trpc-server

0.3.4

tRPC Server Middleware for Hono

@leight/trpc-source-server

0.5.21

Interconnection between trpc and source stuff.

@tevm/server

0.0.1

A TRPC server serving JSON RPC for Tevm vm

Gathering detailed insights and metrics for @trpc/server

@trpc/server

🧙‍♀️ Move Fast and Break Nothing. End-to-end typesafe APIs made easy.

10.45.2

35,199

MIT

TypeScript

47,294,992

5.6

Installations

npm install @trpc/server

Developer Guide

BETA

Typescript

❌ No

Module System

CommonJS, ESM

Node Version

20.10.0

NPM Version

lerna/8.0.0/node@v20.10.0+x64 (darwin)

Score

98.8

Supply Chain

96.5

Quality

97.6

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

26

Total

4,271

Closed

850

Merged

3,395

Issues

Open

103

Total

1,143

Closed

1,040

Releases

200

v10.45.2

Published on 11 Mar 2024

v10.45.1

Published on 06 Feb 2024

v11 beta

v11.0.0-next-beta.0

Published on 12 Jan 2024

v10.45.0

Published on 26 Dec 2023

v10.44.1

Published on 23 Nov 2023

v10.44.0

Published on 21 Nov 2023

View all 200 releases

Developer

trpc

Statistics

35,199 Stars

4,305 Commits

1,263 Forks

94 Watching

30 Branches

427 Contributors

Updated on 06 Dec 2024

Languages

TypeScript (79.86%)

MDX (17.14%)

JavaScript (1.78%)

CSS (1.22%)

Total Downloads

Cumulative downloads

Total Downloads

47,294,992

Last day

20%

126,653

Compared to previous day

Last week

-1.1%

684,873

Compared to previous week

Last month

1.7%

2,999,817

Compared to previous month

Last year

128.4%

31,095,164

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

tRPC

End-to-end typesafe APIs made easy

Demo

`@trpc/server`

Create tRPC routers and connect them to a server.

Documentation

Full documentation for @trpc/server can be found here

Installation

1# npm
2npm install @trpc/server
3
4# Yarn
5yarn add @trpc/server
6
7# pnpm
8pnpm add @trpc/server
9
10# Bun
11bun add @trpc/server

We also recommend installing zod to validate procedure inputs.

Basic Example

1import { initTRPC } from '@trpc/server';
2import {
3  CreateHTTPContextOptions,
4  createHTTPServer,
5} from '@trpc/server/adapters/standalone';
6import { z } from 'zod';
7
8// Initialize a context for the server
9function createContext(opts: CreateHTTPContextOptions) {
10  return {};
11}
12
13// Get the context type
14type Context = Awaited<ReturnType<typeof createContext>>;
15
16// Initialize tRPC
17const t = initTRPC.context<Context>().create();
18
19// Create main router
20const appRouter = t.router({
21  // Greeting procedure
22  greeting: t.procedure
23    .input(
24      z.object({
25        name: z.string(),
26      }),
27    )
28    .query(({ input }) => `Hello, ${input.name}!`),
29});
30
31// Export the app router type to be imported on the client side
32export type AppRouter = typeof appRouter;
33
34// Create HTTP server
35const { listen } = createHTTPServer({
36  router: appRouter,
37  createContext,
38});
39
40// Listen on port 2022
41listen(2022);

No vulnerabilities found.

10

Security-Policy

Determines if the project has published a security policy.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/codeql-analysis.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/codeql-analysis.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/codeql-analysis.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/codeql-analysis.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/labeler.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/lint.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock-issues.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/lock-issues.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/main.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-next.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/release-next.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-next.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/release-next.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/release.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/subtree.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/subtree.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/subtree.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/subtree.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/subtree.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/subtree.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/subtree.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/subtree.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/subtree.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/trpc/trpc/subtree.yml/next?enable=pin
Warn: containerImage not pinned by hash: examples/.railway/next-sse-chat/Dockerfile:1
Warn: containerImage not pinned by hash: examples/.railway/next-sse-chat/Dockerfile:9
Warn: containerImage not pinned by hash: examples/.railway/next-sse-chat/Dockerfile:17
Warn: containerImage not pinned by hash: examples/.railway/next-sse-chat/Dockerfile:32
Info: 0 out of 18 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 9 third-party GitHubAction dependencies pinned
Info: 0 out of 4 containerImage dependencies pinned

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

39 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg
Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2
Warn: Project is vulnerable to: GHSA-7q7g-4xm8-89cq
Warn: Project is vulnerable to: GHSA-c2jc-4fpr-4vhg
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-h452-7996-h45h
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
Warn: Project is vulnerable to: GHSA-rrr8-f88r-h8q6
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-9pv7-vfvm-6vr7
Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q
Warn: Project is vulnerable to: GHSA-pppg-cpfq-h7wr
Warn: Project is vulnerable to: GHSA-3xq5-wjfh-ppjc
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-9w5j-4mwv-2wj8
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-3787-6prv-h9w3
Warn: Project is vulnerable to: GHSA-9qxr-qj54-h672
Warn: Project is vulnerable to: GHSA-m4v8-wqvr-p9f7
Warn: Project is vulnerable to: GHSA-5r9g-qh6m-jxff
Warn: Project is vulnerable to: GHSA-r6ch-mqf9-qc9w
Warn: Project is vulnerable to: GHSA-wqq4-5wpv-mx2g
Warn: Project is vulnerable to: GHSA-8c93-4hch-xgxp
Warn: Project is vulnerable to: GHSA-f8mp-x433-5wpf
Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc

Score

5.6

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @trpc/server

Other packages similar to @trpc/server

@trpc/server

Installations

Developer Guide

❌ No

CommonJS, ESM

20.10.0

lerna/8.0.0/node@v20.10.0+x64 (darwin)

Score

Pull Requests

Issues

Releases

Developer

Statistics

Languages

Total Downloads

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

tRPC

@trpc/server

Documentation

Installation

Basic Example

10

10

10

10

10

7

6

0

0

0

0

0

5.6

/10

`@trpc/server`