#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

#Maintainer

28 posts

Feed·
20 of 28 posts
Give your eve agent GitHub tools - Vercel
📰
0Read More

Give your eve agent GitHub tools - Vercel

Vercel News·Hugo Richard·7 days ago
#0hlESgGY
#vercel#agent#github#tools#maintainer

GitHub Tools now ships an eve toolset through the new @github-tools/sdk/eve subpath. One file in agent/tools/ can register every GitHub tool, or a preset such as code-review, so you can build a complete GitHub agent in nine lines of code.

15s
The Anatomy of 50 Open Source PRs: What Gets Merged, What Gets Ignored, and Why (Real Data From an AI Agent)
🖼️
0Read More

The Anatomy of 50 Open Source PRs: What Gets Merged, What Gets Ignored, and Why (Real Data From an AI Agent)

DEV Community: github·zk0x /// ℹ️·5 months ago
#BmKnUl5T
#dev#merge#first#maintainer#hours

I let an AI agent submit 50+ pull requests across open source projects in 72 hours. Here's the...

15s
I built an open-source dependency intelligence platform in TypeScript — here's how it works
🖼️
0Read More

I built an open-source dependency intelligence platform in TypeScript — here's how it works

DEV Community: security·Zayd Mulani·5 months ago
#vJGSpopG
#dev#depgraph#packages#risk#pnpm

Most teams find out their dependencies are risky after something breaks. A maintainer disappears, a...

15s
Bun got ported from Zig to Rust - by Claude
🖼️
0Read More

Bun got ported from Zig to Rust - by Claude

DEV Community·Ben K.·6 months ago
#j78yonjp
#bunjs#ai#discuss#software#jarred

Jarred Sumner, the creator and maintainer of Bun, merged the PR that ports Bun from Zig to Rust. The...

15s
Mastering Agentic Workflows in PHP: Parameter-Aware Tool Tracking (Neuron AI #566)
🖼️
0Read More

Mastering Agentic Workflows in PHP: Parameter-Aware Tool Tracking (Neuron AI #566)

DEV Community·Valerio·6 months ago
#RKEWMxtR
#php#ai#webdev#agents#tool

From Dev.to - php: Mastering Agentic Workflows in PHP: Parameter-Aware Tool Tracking (Neuron AI #566)

15s
Hono Has 34M Weekly Downloads and One Maintainer
🖼️
0Read More

Hono Has 34M Weekly Downloads and One Maintainer

DEV Community·Pico·6 months ago
#d74CIiyW
#javascript#security#webdev#hono#maintainer

Hono is one of the hottest TypeScript web frameworks — 34M weekly downloads, 1 npm maintainer. Here's what that means for your supply chain risk.

15s
The Anthropic SDK Looks Safe. Two of Its Transitive Dependencies Aren't.
🖼️
0Read More

The Anthropic SDK Looks Safe. Two of Its Transitive Dependencies Aren't.

DEV Community·Pico·6 months ago
#E4oxi0Ca
#npm#security#javascript#supplychain#maintainer

@anthropic-ai/sdk scores HEALTHY at depth 1. At depth 2, two of its dependencies are CRITICAL: sole maintainer, 12–16M weekly downloads, no release in two years.

15s
MCPwn Is Live. We Scanned the Supply Chains of 14 MCP Servers. Here's What We Found.
🖼️
0Read More

MCPwn Is Live. We Scanned the Supply Chains of 14 MCP Servers. Here's What We Found.

DEV Community·Pico·6 months ago
#AAuGKslk
#mcp#security#supplychain#server#score

Real CVEs, real data. We scored 14 MCP servers on behavioral supply chain risk. Every exploited server scored below 55. The supply chains are worse than the packages.

15s
Two Independent Attack Surfaces: Why npm Provenance Doesn't Make a Package Safe
🖼️
0Read More

Two Independent Attack Surfaces: Why npm Provenance Doesn't Make a Package Safe

DEV Community·Pico·6 months ago
#ckMkxzxf
#npm#security#javascript#supplychain#build

From Dev.to - security: Two Independent Attack Surfaces: Why npm Provenance Doesn't Make a Package Safe

15s
How npm Behavioral Risk Scoring Works: The Methodology Behind getcommit.dev
🖼️
0Read More

How npm Behavioral Risk Scoring Works: The Methodology Behind getcommit.dev

DEV Community·Pico·6 months ago
#xWy3Si9Q
#security#javascript#npm#package#critical

npm audit answers the wrong question for supply chain risk. Here's the 5-dimension behavioral scoring system that flags structural risk before CVEs are filed — with the full math, score weights, and real examples.

15s
The MCP SDK Looks Safe. Its Supply Chain Has 11 CRITICAL Single-Maintainer Packages.
🖼️
0Read More

The MCP SDK Looks Safe. Its Supply Chain Has 11 CRITICAL Single-Maintainer Packages.

DEV Community·Pico·6 months ago
#DuALWHF0
#security#javascript#critical#package#maintainer

When you score @modelcontextprotocol/sdk, you get 75/100. When you score its full dependency tree to depth 2: 11 CRITICAL packages. This is the real supply chain attack surface for MCP builders.

15s
The MCP SDK Looks Safe. Its Supply Chain Has 11 CRITICAL Single-Maintainer Packages.
🖼️
0Read More

The MCP SDK Looks Safe. Its Supply Chain Has 11 CRITICAL Single-Maintainer Packages.

DEV Community·Pico·6 months ago
#tIkALoEi
#ai#javascript#critical#package#maintainer

From Dev.to - security: The MCP SDK Looks Safe. Its Supply Chain Has 11 CRITICAL Single-Maintainer Packages.

15s
I audited 25 top npm packages with a zero-install CLI. Here's who passes.
🖼️
0Read More

I audited 25 top npm packages with a zero-install CLI. Here's who passes.

DEV Community·Pico·6 months ago
#Axaa6atX
#npm#security#javascript#safe#critical

From Dev.to - security: I audited 25 top npm packages with a zero-install CLI. Here's who passes.

15s
You've probably never heard of these npm packages. They're in your production app.
🖼️
0Read More

You've probably never heard of these npm packages. They're in your production app.

DEV Community·Pico·6 months ago
#FYMIkxsZ
#npm#security#javascript#webdev#downloads

From Dev.to - webdev: You've probably never heard of these npm packages. They're in your production app.

15s