
Security News
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.
@builder.io/dev-tools
Advanced tools
Setup and integrate Builder.io Visual CMS during development using the Devtools plugin. Builder Devtools can be integrated with a project's development through either a Next.js config, Remix config, Vite plugin, or Webpack plugin.
Builder's Devtools can be installed and initialized using:
npm
npm init builder.io@latest
pnpm
pnpm create builder.io@latest
This command will update the config file (such as next.config.js, or vite.config.js) and install the @builder.io/dev-tools package. Once installed, you can start your app's dev server:
npm run dev
To develop and test Builder Devtools locally:
cd dist/dev-tools
npm link
npm link @builder.io/dev-tools
npx builder.io figma generate
Alternatively, you can manually install Builder's Devtools, and update the config files following the steps below.
npm install -D @builder.io/dev-tools
Next step is to add the Devtools plugin to your build tool's config file. For example, if you're using Next.js, see the docs below on how to import and add Devtools to a Next.js app.
A config wrapper function for the Next.js config is provided in order to run Devtools during development. Wrap your existing next config using the withBuilderDevTools() function that's created when it is required at the top of the config file.
// next config file
const withBuilderDevTools = require("@builder.io/dev-tools/next")({
// Builder Devtools Options
});
module.exports = withBuilderDevTools({
// next config
});
Or configuration as a function:
module.exports = (phase, defaultConfig) => {
return withBuilderDevTools(defaultConfig);
};
A config wrapper function for the Remix config is provided in order to run Devtools during development. Wrap your existing remix config using the withBuilderDevTools() function that's created when it is required at the top of the config file.
// remix config file
const withBuilderDevTools = require("@builder.io/dev-tools/remix")({
// Builder Devtools Options
});
module.exports = withBuilderDevTools({
// remix config
});
The Vite plugin for Devtools is meant for frameworks using Vite for its development. Currently, Devtools supports Qwik integrated with Vite. Import builderDevTools from @builder.io/dev-tools/vite and place it as the the first plugin to ensure it runs before others.
// vite config file
import { defineConfig } from "vite";
import { builderDevTools } from "@builder.io/dev-tools/vite";
export default defineConfig(() => {
return {
plugins: [builderDevTools()],
};
});
The Devtools webpack plugin is for React projects. If your project is using Next.js, please see the Next.js docs above on how to add the Devtools plugin to the next config. Below is a general webpack config for a React project.
// webpack config file
const { BuilderDevToolsPlugin } = require("@builder.io/dev-tools/webpack");
module.exports = {
plugins: [new BuilderDevToolsPlugin()],
};
Devtools can also be started with a CLI command, which could be useful if there is a custom setup that doesn't fit into one of the above solutions. Below is an example of running CLI from an npm script:
{
"scripts": {
"devtools": "builder-dev-tools"
}
}
Set BUILDER_DISABLE_AMPLITUDE=true to disable Amplitude analytics tracking when using the devtools CLI. This is useful for privacy-conscious environments or when you want to prevent analytics data collection.
BUILDER_DISABLE_AMPLITUDE=true npx builder.io fusion dev
Or add it to your .env file:
BUILDER_DISABLE_AMPLITUDE=true
FAQs
Builder.io Visual CMS Devtools
The npm package @builder.io/dev-tools receives a total of 25,681 weekly downloads. As such, @builder.io/dev-tools popularity was classified as popular.
We found that @builder.io/dev-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 23 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.