Spoko Upstream
Every tool you use.We quietly repaired it.
Real bugs in the packages your stack depends on — found, reproduced, fixed, merged upstream. No mocks. No workarounds. The fix lives in the code you'll `npm install` tomorrow.
143
merged pull requests
901.4K
⭐ GitHub stars
102
repositories
17.4B
↓ npm / month
Stats as of Jul 9, 2026
The runtime beneath the runtime
Node.js, HTTP, URL, encoding
We ship fixes to the plumbing that every request travels through — the URL parser Node uses, undici's HTTP/1.1 client, the cookie and range parsers that back Express, iconv-lite, structured-clone. When the plumbing leaks, thousands of downstream libraries leak with it. We patched the leaks.
Where the data actually lives
MongoDB, Redis, TanStack DB
Data layer bugs hide in falsy-zero guards, silent overflow, and encoding edges. We fixed MongoDB's BSON encoder, Redis's COPY-with-DB-0 dropout, ioredis's PSETEX millisecond corruption, and TanStack DB's gcTime pass-through — the kind of one-line fixes that unbreak entire deployments.
The tools you spend your day in
Mantine, MUI, ESLint, Vitest, Puppeteer, Raycast
Design systems, linters, browser automation, dev-time launchpads. If it's on your dock, in your IDE, or in your CI, we've probably repaired something inside. The kind of small paper-cut fixes that make a good day at the keyboard less annoying.
Where the standards get interpreted
markdown-it, formatjs, faker, entities, sax, WPT
Parsers, encoders, formatters — the libraries that promise to implement the spec correctly. We test that promise against the spec's own oracle, submit reproducers to Web Platform Tests, then push the fix upstream so the whole ecosystem inherits the correctness.
The frameworks your product is built on
React Router, GraphQL, Solid, XState, Effect, next-intl
The routing, state, schema, and effect systems your app leans on. When these libraries have edge-case bugs, your feature ships with the bug baked in. We find them, prove them with a failing test, then send the smallest possible diff that turns the test green.
- View PR#3318Jul 3, 2026
fix(client): COPY with DB 0 must emit the DB argument
- View PR#3317Jul 3, 2026
fix(client): GETEX PXAT with Date must encode milliseconds
- View PR#3323Jul 9, 2026
fix(client): RESTORE with IDLETIME/FREQ 0 must emit the argument
- View PR#3324Jul 9, 2026
fix(client): XSETID with ENTRIESADDED 0 must emit the argument
- View PR#2437Jun 24, 2026
fix: reassemble comma-in-parens formatters at any chain position
- View PR#2440Jul 8, 2026
fix: parse $t() nesting options block that spans multiple lines
- View PR#2441Jul 8, 2026
fix: stop mutating the passed replace object when returning details
- View PR#2442Jul 8, 2026
fix: skip interpolation of placeholders inside escaped values
Brand logos are trademarks of their respective owners. Their inclusion here reflects public open-source contributions merged upstream — not endorsement.
Have a product that needs the same eye?
If your team ships software and wants engineers who treat your codebase the way we treat upstream, let's talk.