
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@booboo-brain/spec
Advanced tools
Booboo graph spec — the JSON contract every adapter emits and every consumer reads.
The Booboo graph contract — the tiny JSON spec every adapter emits and every consumer reads. Types + a validator, zero runtime deps.
npm install @booboo-brain/spec
import { validate, type BoobooGraph, type BNode, type BLink } from "@booboo-brain/spec";
const graph: BoobooGraph = {
booboo: "1.0",
meta: { root: "core", title: "My System", layers: [{ name: "agents", color: "#c9a04a" }] },
nodes: [{ id: "core", type: "root", layer: "agents", label: "CORE" }],
links: [],
};
const { ok, errors, warnings } = validate(graph); // never throws
validate returns errors for missing required fields and warnings for dangling links /
unknown layers (the builder drops those). The full human-readable spec lives in
SPEC.md.
Part of Booboo — the unified operational brain. MIT.
FAQs
Booboo graph spec — the JSON contract every adapter emits and every consumer reads.
The npm package @booboo-brain/spec receives a total of 25 weekly downloads. As such, @booboo-brain/spec popularity was classified as not popular.
We found that @booboo-brain/spec demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.