
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@archstone/runtime
Advanced tools
Archstone runtime — a capability registry over compiled IR, and the MCP emitter that serves it as agent-callable tools over stdio or HTTP.
Runtime — the capability Registry (list/resolve tools over the IR) and the MCP emitter:
lowers IR tools to MCP tools/list + typed outputSchema, dispatches tools/call through
a binding's connector and response mapping, and serves the result over stdio (or any
transport, e.g. Streamable HTTP on Cloudflare Workers).
Part of Archstone, an open-source
Capability Platform. This package is the third stage of the compiler pipeline
(schema → compiler → runtime → cli) — most users should install
@archstone/cli instead of depending on
this package directly.
Apache-2.0
FAQs
Archstone runtime — a capability registry over compiled IR, and the MCP emitter that serves it as agent-callable tools over stdio or HTTP.
The npm package @archstone/runtime receives a total of 919 weekly downloads. As such, @archstone/runtime popularity was classified as not popular.
We found that @archstone/runtime demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.