Hackers' Pub
Fedify@fedify@hackers.pub洪 民憙 (Hong Minhee)@hongminhee@hackers.pub
Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards, so-called fediverse. It aims to eliminate the complexity and redundant boilerplate code when building a federated server app, so that you can focus on your business logic and user experience.
洪MInvited by 洪 民憙 (Hong Minhee)
Joined July 2026
Fedify shared
DrFed@drfed@hackers.pub洪 民憙 (Hong Minhee)@hongminhee@hackers.pub
DrFed 0.1.0: Our first release
DrFed 0.1.0 marks the initial MVP release of a web-based platform designed for developing and debugging ActivityPub implementations. Built by the Fedify team with support from NLnet and the NGI0 Commons Fund, this early version allows developers to run local test environments, generate actors, store ActivityPub objects, and inspect incoming JSON-LD deliveries through an activity log. Distributed via npm for Node.js environments, the suite provides four core CLI utilities with embedded PGlite support for quick local setups as well as PostgreSQL compatibility for broader deployments. While advanced debugging utilities like signature validators and automated remote activity dispatching remain in development, this release establishes a functional testing foundation for federation developers to explore and provide early feedback.Read full articleFedify security updates: 2.0.30, 2.1.26, 2.2.15, 2.3.10, and 2.4.0
Fedify has released security updates addressing two vulnerabilities: an unbounded alternate-document fetch chain issue that allows attackers to trigger indefinite HTTP loops to exhaust server resources, and a routing flaw where unverified activity documents could bypass dereference verification. The patches introduce a strict 20-hop limit across redirects, preserve fetch cancellation signals, and ensure that dereferenced activities properly replace unverified JSON-LD documents during inbox routing. Upgrading Fedify across affected 2.x versions and migrating from 1.x is critical to securing federated servers against resource exhaustion and spoofed payload processing.Read full articleFedify shared
Jiwon@z9mb1@hackers.pub
·First big release after I joined as a maintainer probably. Patch releases, feature implementations, bug fixes, and lots of code reviews. Thanks, every contributors!!
Fedify@fedify@hackers.pub洪 民憙 (Hong Minhee)@hongminhee@hackers.pub
Fedify 2.4.0: FEP-ef61 portable objects, background tasks, media uploads, and inbox request reports
Fedify is a TypeScript framework for building ActivityPub servers. It implements federation details such as HTTP Signatures, JSON-LD processing, WebFinger, inbox and outbox routing, and activity delivery.
Fedify 2.4.0 is a minor release with an unusually long changelog. The main addition is support for FEP-ef61 portable objects: a Fedify server can now host actors whose identity is a DID rather than a domain, serve and verify their signed objects, and consume the portable objects of other servers. The release also adds an API for application-defined background tasks, the ActivityPub Media Upload extension, a hook that reports how every inbox request was authenticated and handled, and 410 Gone tombstones for deleted objects. Several defaults change to limit what a hostile peer can make Fedi…
Fedify shared
洪 民憙 (Hong Minhee) 
@hongminhee@hollo.social
·@hongminhee@hollo.socialA Chinese developer, 
@21018365486北雁云依 
, wrote about adding ActivityPub to her blog using Fedify. Thank you for using Fedify!
此前，博客的ActivityPub实现只摘下了低垂的果实。为了实现更多功能，我决定迁移到Fedify。
