
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@bytecodealliance/jco-std
Advanced tools
Library of shared functionality for use with the JS WebAssembly components
@bytecodealliance/jco-stdThis @bytecodealliance/jco sub-project contains shared functionality and
reusable libraries that can be used for building WebAssembly Components in Javascript.
WebAssembly Components are a WebAssembly binaries that use the Component Model, an evolving architecture for interoperabl WebAssembly libraries, aplications and environments.
WebAssembly components can be used from server side applications and in the browser, and
@bytecodealliance/jco-std contains shared functionality and helpers for both environments.
[!WARNING] Browser support is considered experimental, and not currently suitable for production applications.
@bytecodealliance/jco-std can be used in varied ways via it's exports, this section
contains some examples of how to get started quickly.
To use @bytecodealliance/jco-std to make building Hono applications easier with WebAssembly,
use the @bytecodealliance/jco-std/http/adapters/hono export:
import { Hono } from "hono";
import { fire } from "@bytecodealliance/jco-std/wasi/0.2.x/http/adapters/hono/server";
const app = new Hono();
app.get("/", () => "Hello World!");
fire(app);
// Although we've called `fire()` with wasi HTTP configured for use above,
// we still need to actually export the `wasi:http/incoming-handler` interface object,
// as componentize-js will be looking for the ES module export.
export { incomingHandler } from "@bytecodealliance/jco-std/wasi/0.2.x/http/adapters/hono/server";
[!NOTE] We use
@bytecodealliance/jco-std/wasi/0.2.x, but if you'd like to use a specific version, you can use an explicitly versioned export like@bytecodealliance/jco-std/wasi/0.2.6.Note that using
0.2.xis similar to usinglatest, it may change at any library update.
Below is a list of utilties provided by @bytecodealliance/jco-std:
| Export | Description |
|---|---|
http/adapters/hono | Enables easier building of Hono HTTP servers |
http/adapters/express | Provides a simple Express-like interface for building HTTP servers |
This project is licensed under the Apache 2.0 license with the LLVM exception. See LICENSE for more details.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this project by you, as defined in the Apache-2.0 license, shall be licensed as above, without any additional terms or conditions.
FAQs
Library of shared functionality for use with the JS WebAssembly components
The npm package @bytecodealliance/jco-std receives a total of 9 weekly downloads. As such, @bytecodealliance/jco-std popularity was classified as not popular.
We found that @bytecodealliance/jco-std demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.