Refuse, an open-source tool that intercepts package manager calls to block vulnerable installs before they execute, launched to address a structural gap in AI coding agent workflows. The tool installs…
VibePod released a unified CLI tool called VibePod that runs AI coding agents in isolated Docker or Podman containers with zero configuration, supporting agents including Claude, Gemini, Codex, Devstr…
Web Cloud Studio released Drydock, an open-source Python command-line tool that adds a repeatable Agile and Test-Driven Development process layer to specification-driven development, enabling users to…
A developer built Claude Supervisor, an open-source tool that automatically pauses and resumes Claude Code when usage limits are hit, allowing long-running agentic tasks to complete unattended. The to…
A lawyer-turned-developer open-sourced OpenSymphony, an AI agent framework that enforces personality, governance, and self-evolution through YAML-based souls, a multi-layer governance system, and a to…
LocalMask, a new open-source CLI tool, masks personally identifiable information (PII) and secrets in code repositories before sending them to large language models (LLMs). The tool creates private, m…
Sqlsure, a deterministic semantic checker for AI-generated SQL, catches logical errors like double-counted revenue and exposed patient identifiers that databases and linters miss. The tool, which runs…
A census of 15,382 Model Context Protocol servers found that 47% run remotely, 16% have verified problems such as deleted GitHub repos or deprecated packages, and 9,207 servers have fewer than 10 star…
A developer released E-- (English--), a programming language written in canonical English that compiles deterministically to Python, separating LLM-based code generation from runtime execution to ensu…
Filingrail has released a first-party MCP server on PyPI, enabling Claude Desktop and other MCP-compatible clients to query SEC filings as tools with a single install and config block. The package, fi…
A developer built downbeat, a local, filesystem-backed message broker for parallel AI coding sessions on the same machine. The tool eliminates manual copy-pasting between terminals by allowing session…
Researchers reported in July 2026 that nine widely used AI coding tools, including Cursor, GitHub Copilot, Gemini CLI, and Windsurf, share a common failure mode called HalluSquatting. Attackers exploi…
TRACE, an open-source Python library for self-organizing long-term memory in LLM agents, was released on PyPI. It organizes conversation history into a hierarchical B+Tree to enable efficient, multi-p…
Socket's AI scanner detected 17 malicious npm and PyPI packages published on July 7, 2026, that typosquat popular payment apps PaySafe, Skrill, and Neteller to steal credentials and tokens from SDK de…
A developer released TurboQuant, a pip-installable adapter for mlx-lm on Apple Silicon that uses a randomized Hadamard transform for data-oblivious, calibration-free quantization of weights and KV cac…
Shadow Web, an open-source Python SDK, cuts web page tokens by 64–97% for LLM agents by flattening Shadow DOM, building typed Action Maps, and converting HTML tables, forms, and lists into clean JSON.…
Finops-mcp, a Python package for querying cloud costs via Claude, has been downloaded 54,056 times total on PyPI, with 37,412 downloads in the last 30 days. The latest version 0.8.22 was released May …
Developer LoreConvo published a guide on building and publishing a Claude plugin to the Anthropic marketplace, detailing how strict manifest validation, dependency pinning, and PyPI release cycles cau…
ActiveGraph v1.2.0 is now live, introducing a pluggable graph projection seam with FalkorDB as the first external backend, achieving up to a 30x speedup on structural queries. The release, driven by e…
The open-source project Mycelium has released a Claude Code plugin that enforces a structured discovery phase before agents generate code, aiming to reduce wasted engineering cycles and improve decisi…