
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@ashlr/stack-core
Advanced tools
Ashlr Stack core — provider adapters, .stack.toml config, Phantom integration. Shared logic behind the Stack CLI and MCP server.
Shared library behind the Ashlr Stack CLI and MCP server. Provider adapters,
.stack.tomlconfig, Phantom integration, source/env detection.
You probably don't want to install this directly. If you want the CLI, install @ashlr/stack. This package exists so the CLI and the ashlr-stack-mcp server can share a single implementation.
bun add @ashlr/stack-core
# or
npm i @ashlr/stack-core
Selected exports — see src/index.ts for the full surface.
| Export | Purpose |
|---|---|
addService(opts) | End-to-end pipeline: login → provision → materialize → persist secrets + MCP entry |
readConfig(cwd) / writeConfig(cfg, cwd) | Read/write .stack.toml + .stack.local.toml |
listProviderNames() / getProvider(name) | Introspect the built-in 23-provider registry |
scanSource(opts) | Detect providers from package.json, configs, .env.example |
detectProvider(envName) | Map an env-var name back to a known provider |
parseEnv(text) | Parse .env-style text into { key, value } pairs |
import {
addService,
readConfig,
listProviderNames,
scanSource,
} from "@ashlr/stack-core";
// Pipeline: provisions a new Supabase project, writes secrets through Phantom,
// merges the MCP entry, and updates .stack.toml + .stack.local.toml.
await addService({ provider: "supabase", cwd: process.cwd() });
const cfg = await readConfig();
console.log(cfg.services.map((s) => s.name));
// Scan an existing checkout for providers already wired up.
const detections = await scanSource({ cwd: process.cwd() });
console.log(listProviderNames().length); // 23
MIT. See LICENSE.
FAQs
Ashlr Stack core — provider adapters, .stack.toml config, Phantom integration. Shared logic behind the Stack CLI and MCP server.
The npm package @ashlr/stack-core receives a total of 2 weekly downloads. As such, @ashlr/stack-core popularity was classified as not popular.
We found that @ashlr/stack-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.