A developer documented running Claude Code headless via a macOS launchd agent for 14 nights, during which the nightly `claude -p` job produced a usable morning note on only 6 of those nights. The fail…
A developer has launched BufferOverride, a public Q&A network for debugging where humans and AI agents both post, answer and verify each other's work. The site separates an asker's acceptance from ind…
An engineer released jpm, a JavaScript package manager written in Rust in which every line was authored by Claude Code, claiming a cold nuxt install of 591 packages on GitHub CI in 1.22 seconds versus…
A developer merged three pull requests into yunaremaia/mcp-guard, an open-source supply-chain security scanner for MCP servers, after a maintainer's review found that the new `mcp-guard verify` featur…
Blend Bunjaku released optimAIzr, an open-source local CLI that profiles Claude Code, Codex and custom API calls to find wasted tokens and quantify savings, first presented September 13, 2026 and open…
Leapwork released Play, an enterprise governance platform built on top of Playwright, on September 30, 2026, as Playwright reached 83 million weekly npm downloads in Q3 2026, up from 1 million in 2021…
A developer launched AfterPack, a free JavaScript obfuscator that reseeds every build so identifiers, encoded strings, decoder signatures and masked constants all change, aiming to break scripts writt…
AgentAvow built a behavioral sandbox that runs MCP servers in a fresh gVisor container with a read-only root, no capabilities, one CPU and a hard time limit, then grades them against fixed rules for u…
AilaFlow launched as a self-hosted AI workspace for teams that runs via Docker and installs through the npm package @ailaflow/cli, serving a local instance at http://localhost:2048/install. The tool l…
A developer outlined a workflow for making VFX authoring agent-ready in PixiJS web game projects by separating authored effect JSON from generated runtime bundles and adding a machine-readable validat…
A developer building a slopsquatting detector removed three false-positive exceptions from its package-risk classifier after finding they cleared packages without real evidence. The rules treated npm …
A Rust implementation of the wait-on npm package was built in four days by parallel coding agents working overnight, passing the same test suite as the JavaScript version with 496 passing, 0 failing, …
A developer has published a release-gate approach for Python AI packages that inspects the exact registry artifact, traces a cold import, and plants harmless credentials to catch malicious behavior be…
Developer dlhck released Ferry, an open-source tool that syncs coding agent setups — skills, instructions, MCP servers and supported settings — from a local machine to remote Linux boxes via a private…
Frappe UI 1.0 has been released, four years after the frappe-ui v0 npm package was first published, according to the project's release announcement. The toolkit now ships 100+ components, automatic da…
A developer released mcp-context-card, an MIT-licensed MCP server that renders a project's agent context — AGENTS.md sections, memory facts and their file locations — as a visible HTML "context card" …
The Cloud Security Alliance's AI Safety Initiative published a research note on April 19, 2026, finding that 440,445 of 2.23 million code samples generated across 16 code-generating models in Python a…
Claude Code 2.1.287, published to npm on October 1, 2026, adds Mods, a plugin type whose JavaScript or TypeScript functions run inside Claude Code on events such as tool calls, submitted prompts and m…
An open-source security script called malfilter analyzes npm package metadata — name similarity, download counts, and creation timestamps — to flag likely malicious packages before installation, targe…
A developer at Microwise AI outlined MWD (Microwise Development), a methodology that enforces one Git repository per package so AI coding agents work within concrete, easily scoped boundaries. To pres…