Security News
NVD Backlog Tops 20,000 CVEs Awaiting Analysis as NIST Prepares System Updates
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
@automattic/big-sky-agents
Advanced tools
Big Sky Agents is a front-end library for building AI-enhanced applications. It is designed to work with Gutenberg UI components and WordPress.com APIs and authentication. It exists to provide a consistent AI UX across Automattic's products and to distribute innovations across projects and platforms.
Links:
To use this package in your project, you can install it via npm:
npm install
To view the components live, you can run Storybook.
You can interact with the components in Storybook. For convenience, you can set the API key in .env like this. It is important to include the STORYBOOK_
prefix for the variable to be picked up:
STORYBOOK_OPENAI_API_KEY="sk-..."
Then run Storybook:
npm run storybook
These instructions show you how to incorporate this package into another project for development, for example a WordPress plugin or React app.
Note that Electron doesn't currently work in this mode due to strangeness with node gyp linking.
First, make sure you're using the same Node version for both apps, e.g.
% nvm current
v20.14.0
Now let's link in this package.
In this directory:
npm link
In the other project:
npm link @automattic/big-sky-agents
[!NOTE] This section applies only to members of the Automattic Github organization.
You will need to be authenticated to NPM.
npm login --scope=@automattic --registry=https://registry.npmjs.org/
Enter your npmjs.com credentials when prompted.
Now you should be able to publish the package. Don't forget to bump the version in package.json
first!
npm publish --access public
You can view the updated package here to verify.
Sign up and get an API key from https://smith.langchain.com/
You'll also need an OpenAI API key for generating responses and running some evaluations.
Add the following to your .env
file:
OPENAI_API_KEY="sk-..."
LANGCHAIN_TRACING_V2=true
LANGCHAIN_ENDPOINT="https://api.smith.langchain.com"
LANGCHAIN_API_KEY="your-api-key"
LANGCHAIN_PROJECT="your-project"
Then run:
node bin/eval-wapuu.js data/site-examples.json
node bin/eval-wapuu.js data/name-examples.js
# OR
node bin/eval-weather-bot.js data/tool-examples.json
Right now it runs a trivial example, which you can find in name-example.json.
Using LocalAI, you can run the Chat Completion inference locally on your machine. This is useful for debugging, experimentation, testing, and just privacy in general.
Make sure your .env has an entry for HUGGINGFACEHUB_API_TOKEN
.
I've only tried this on a Mac. Kinda works, might need a better model, but they're only going to improve. This is the worst they'll ever be ;)
Install deps: brew install abseil grpc llama.cpp
Update your .env with the correct address and settings:
LOCALAI_ADDRESS=127.0.0.1:1234
LOCALAI_CONTEXT_SIZE=8192
LOCALAI_CORS=true
curl -Lo local-ai "https://github.com/mudler/LocalAI/releases/download/v2.16.0/local-ai-$(uname -s)-$(uname -m)" && chmod +x local-ai
If you have the .env vars, just run:
./local-ai
This will download the models, hermes-2-pro-mistral
and mistral-0.3
.
Alternatively, without the .env
vars:
./local-ai --address=":1234" --cors --context-size=8192
The Big Sky Agent Framework is a set of core libraries and UI adapters to Gutenberg components which enables simple, pluggable, isolated agents and tools that can collaborate on shared data structures and tasks with the user. It's similar in some ways to LangChainJS/LangGraph but has no dependencies other than WordPress' core libraries (@wordpress/components, etc). It is intended to be accessible to developers at all levels of experience - but we're not there yet.
The Big Sky Agent Framework currently has the following features:
@wordpress/components
.The roadmap is roughly the following (in no particular order):
FAQs
The Big Sky Agents SDK
The npm package @automattic/big-sky-agents receives a total of 49 weekly downloads. As such, @automattic/big-sky-agents popularity was classified as not popular.
We found that @automattic/big-sky-agents demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.