npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

@haxtheweb/haxcms-nodejs

v26.8.1

Published

HAXcms single and multisite nodejs server, api, and administration

Vulnerabilities

Powered byPowered by Snyk
  • 0High
  • 0Medium
  • 0Low

Links

Git

Maintainers

btoprobtopro

Keywords

haxthewebhaxcmshaxsitehtwwebcomponentslit

Readme

Project Status: Active – The project has reached a stable, usable state and is being actively developed. OpenSSF Scorecard Community Support License: Apache 2.0 Contributor Covenant Discord Lit #HAXTheWeb Published on npm build X

HAXcms with nodejs backend

Start the server in any HAXsite or HAXcms instance

HAXcms nodejs backend

Run commands

npm install
npm start

Visit http://localhost:3000 if it doesn't automatically open

API conformance testing

Run endpoint conformance checks against src/openapi/site-spec.yaml:

npm run test:api-conformance

The runner creates an isolated runtime workspace, then bootstraps a real site via API before endpoint checks run.

  • The first bootstrap step calls createSite and generates a runtime site name:
    • haxcms-test-harness-{timestampStartOfTest}
  • All conformance calls then run against that real site path.
  • Optional runtime login override values:
    • HAXCMS_TEST_USERNAME
    • HAXCMS_TEST_PASSWORD

Runtime credential overrides are also supported in-process via globals:

  • globalThis.HAXCMS_RUNTIME_CREDENTIALS = { username, password }
  • globalThis.HAXCMS_RUNTIME_USERNAME
  • globalThis.HAXCMS_RUNTIME_PASSWORD

Current coverage snapshot

Current automated test coverage in this repository is the API conformance suite:

  • Suite file: test/api-conformance/site-spec.conformance.test.cjs
  • Script: npm run test:api-conformance
  • Additional test scripts/suites are not currently wired in package.json

The suite currently validates:

  • Discovery/spec endpoints:
    • getSiteApiDiscovery, getSiteOpenApi, getSiteOpenApiJson, getSiteOpenApiYaml, getApiCatalog
  • Site/content graph endpoints:
    • getSiteSummary, listEntityDescriptors, listSchemas, listItems, getItemByIdOrSlug, listContent, getContentByIdOrSlug, listTags, searchContent
  • Component and metadata endpoints:
    • listCustomElements, getCustomElementByName, listBlocks, getBlockByName, getBlockUsage, listRegions, getRegionByName
  • Theme/report/view/analytics endpoints:
    • listThemes, getActiveTheme, getThemeByName, listReports, getReportByName, getAnalyticsCapabilities, listViews, getViewById, getViewResults, listDisplaysAlias, getDisplayResultsAlias
  • Secured file and revision endpoints:
    • listFiles, createFile, getFileByUuid, updateFileByUuid, deleteFileByUuid, listItemRevisions

Behavior coverage in the same suite includes:

  • OpenAPI response/schema conformance checks
  • Auth matrix checks for secured routes (no auth, bearer-only, invalid site token, valid site token)
  • Boundary/error checks (missing required params, invalid ids/slugs, pagination/query bounds)
  • Representation/header checks (json, yaml, xml, md, html where supported)
  • End-to-end file lifecycle checks (create → list/find → get → update → delete)

Temporary known skip in the suite:

  • getApiCatalog returns linkset payload
    • Reason: runtime /.well-known/api-catalog fixture behavior is still being finalized

MCP and deployment profiles

  • MCP policy defaults are controlled via _config/config.json.
  • New installs include:
    • deploymentProfile: single-site, self-hosted-multi-site, or haxiam-managed
    • mcp.enabled: global MCP toggle
    • mcp.readOnly: write-protection toggle for future MCP write tools
  • Default behavior:
    • haxiam-managed defaults MCP to disabled unless explicitly enabled.
    • Other profiles default to MCP enabled with read-only mode on.

Get Help / Issues / Support

  • Discord Channel - https://discord.gg/EKYJAjqGhf
  • Unified issue queue - https://github.com/haxtheweb/issues/issues
  • Using Merlin directly in any HAX spaces and type "Issue" to jump start a report!

Watch and Learn more about HAX here:

  • Try Hax: https://hax.cloud
  • HAXCellence https://haxtheweb.org/what-is-hax
  • Youtube channel - https://www.youtube.com/@haxtheweb

Related links and tech

HAX Traveler: World Changer