kingchenc
f7f0bfbc48
Maintenance release — supply-chain and CI housekeeping only. No library code or public API changes. ### Security - Triaged the pyo3 advisories RUSTSEC-2026-0176 / RUSTSEC-2026-0177 as not affecting Wickra (vulnerable APIs unreachable from the binding; fix blocked upstream by rust-numpy pinning pyo3 `^0.28`). Recorded in `deny.toml` and `osv-scanner.toml`. ### Changed - Java binding: `central-publishing-maven-plugin` 0.5.0 → 0.10.0. - CI GitHub Actions bumped to latest (checkout, setup-go, setup-java, codeql-action, taiki-e/install-action). - Added a Maven ecosystem to Dependabot. Version bumped across all manifests/lockfiles via `bump_version.py`; Cargo.lock refreshed. CHANGELOG `[0.8.9]` filled. Tag/publish to follow on explicit GO.
Wickra — Node.js
Streaming-first technical indicators for Node.js. npm install wickra —
prebuilt native binary, no system dependencies.
Wickra is a multi-language technical-analysis library with a Rust core and bindings for Python, Node.js and WebAssembly, plus a C ABI for C/C++, C#, Go, Java, R and any other C-capable language. Every indicator is an O(1) streaming state machine, so live trading bots and historical backtests share the exact same implementation. This package is the Node.js binding (napi-rs); it exposes 200+ streaming-first indicators across sixteen families.
Install
npm install wickra
The native addon ships as a prebuilt binary per platform (Linux, macOS, Windows — x64 and arm64), selected automatically through optional dependencies. There is nothing to compile.
Quick start
const wickra = require('wickra');
// Batch: run an indicator over a whole array.
const prices = Array.from({ length: 1000 }, (_, i) => 100 + i * 0.1);
const values = new wickra.RSI(14).batch(prices); // null during warmup
// Streaming: the same indicator, fed tick by tick in O(1).
const rsi = new wickra.RSI(14);
for (const price of liveFeed) {
const value = rsi.update(price); // no recomputation over history
if (value !== null && value > 70) {
console.log('overbought');
}
}
batch(prices) and feeding the same prices through update() produce
identical values — the equivalence is enforced by the test suite.
Benchmark
benchmarks/throughput.js reports streaming and batch updates-per-second for
SMA, ATR and MACD. It measures this binding's FFI overhead, not a
cross-library ratio (the same Rust core runs under every binding) — see the
repository BENCHMARKS.md §3.
npx napi build --platform --release
node benchmarks/throughput.js
Documentation
The full indicator catalogue, guides, quickstarts, and API reference live in the main repository and documentation site:
- Repository & full indicator list: https://github.com/wickra-lib/wickra
- Docs (quickstarts, cookbook, TA-Lib migration): https://docs.wickra.org
- Runnable examples:
examples/node/
Wickra ships native bindings for Python, Node.js, WebAssembly and Rust, plus a
C ABI hub that any C-capable language (C, C++, Go, C#, Java, R) links against —
all exposing the same indicators from the shared, unsafe-forbidden Rust core.
Disclaimer
Wickra is an indicator toolkit, not a trading system. The values it computes are deterministic transforms of the input data — they are not financial advice and do not predict the market. Any use in a live trading context is at your own risk. The library is provided as is, without warranty of any kind.
License
Licensed under either of Apache-2.0 or MIT at your option.