An open-source macOS desktop app for DeepSeek Harness (dsh), called dsh-desktop, wraps the harness's Web UI in a native window, enabling local chat, file operations, terminal use, and approvals withou…
An open-source, candle-only crypto pump detector, the pump-dump-crypto-screener, is seeking machine learning contributors to improve its detection algorithms. The TypeScript monorepo, available on Git…
DietCokewithSugar released dsh-user-experience 0.3.1, a persona-driven UX walkthrough plugin for DeepSeek Harness (DSH) that scans React and TypeScript source code for UX issues, pinpoints them, and s…
DSKIN, a cartoon pixel skin plugin for the DeepSeek Harness (DSH) Web GUI, has been released by developer dancingmemory, enabling living pixel pets that stroll, blink, and hop without altering the ori…
Pragma, a code-public desktop application for orchestrating multiple AI agents, was released as a preview on GitHub, allowing users to combine agent harnesses, models, tools, and context sources into …
Hermes Notes, a self-hosted block-first personal knowledge base, has been released on GitHub by developer jpmoo. The application unifies notes, tasks, and projects into typed blocks that link together…
ResiliReplay, a new open-source TypeScript toolkit for chaos testing AI agents and MCP servers, lets developers record versioned events, inject seed-controlled faults, and convert broken traces into r…
A developer argues that environment resolution tools like mise and repository acceptance tools like Ota solve different problems and work best in combination. Mise handles tool and runtime versioning,…
GitHub made a three-day cooldown the default for Dependabot version updates on July 14, and PyPI began rejecting new files uploaded to releases older than 14 days on July 22, betting that patience bea…
A developer released an open-source monorepo template for building AI-native applications on Cloudflare infrastructure, featuring strict TypeScript typing and pnpm workspace management to enable low-c…
A fake website at corepack[.]org is impersonating the Node.js Corepack tool and distributing malware to developers, Socket's Threat Research team reported. The site delivers an infostealer that access…
A developer has released a pnpm monorepo template designed for AI agents to safely build and maintain applications, using TypeScript with Zod, Cloudflare infrastructure, and tools like Claude Code and…
TypeScript developers face increased risk from malicious npm packages, with the Shai-Hulud 2.0 attack in November backdooring 796 packages totaling over 20 million weekly downloads and the Mini Shai-H…
A developer created Claude Code skills to enforce safe dependency update practices for JavaScript and PHP projects, aiming to mitigate supply chain attacks. The skills require agents to research recen…
A developer released Velocity, a keyless 3D globe that aggregates 15 live open intelligence feeds including aircraft, ships, satellites, GPS jamming, dark vessels, earthquakes, internet outages, confl…
A developer argues that AGENTS.md files, while useful for providing repo-specific guidance to AI coding agents, are insufficient for ensuring safe, verifiable, and inspectable agent execution. The pos…
Developer Scott Spencer released My-Pi Coding-Agent, a curated distribution of the Pi coding agent CLI with prewired extensions including MCP, LSP, skills, recall, redaction, telemetry, team mode, and…
A developer warns that monorepos, while centralizing multiple packages and services, create a security blind spot because a single repository can contain many different dependency trees with varying r…
A developer argues that AI coding agents need a structured, graph-based memory system to retain project-specific lessons, rather than relying on larger prompts or temporary context. The proposed syste…
Developer released Pacwich, a lightweight monorepo tool that works with Bun, npm, or pnpm, replacing the earlier bun-workspaces package. The tool requires zero configuration and uses plain package.jso…