
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@clize/sites
Advanced tools
Sites by Clize — ship a real marketing site from your coding agent: domain, HTTPS and a working inbox included. Installs the Clize CLI + MCP server.
@clize/sitesBuild and ship a real marketing site from Claude Code: your agent writes the code with 39 design styles, Clize puts it live — domain, HTTPS, and a working inbox included.
A Clize product · clize.ai/sites
Sites generated by coding agents usually die at the preview link. This line is the other half: the part that ends with a domain someone can type.
build site start returns the workflow, a catalog of 39 style constitutions, and a recommendation for your brief — palettes, font pairs, anti-patterns. Your agent still writes the code; it just stops improvising the taste.deploy pushes a directory to a real host with HTTPS on a real domain — a free <slug>.clize.app handle or one you bought a minute earlier.support@ inbox with it, so the contact form on the page has somewhere to land.serve supports Range requests and doesn't poison media caching, so pages with <video> actually play while you iterate.npm i -g @clize/clize
@clize/sites ships no code of its own — it is the Sites entry point on npm and in the MCP registry (ai.clize/sites), and it depends on @clize/clize: one CLI, one MCP server, one account behind every Clize product line. Installing it gets you the whole CLI, not a sites-only fork.
Note that npm does not put a dependency's executable on your PATH when you globally install a metapackage, so install @clize/clize directly for the clize command. Use @clize/sites for the MCP server below.
claude mcp add sites -- npx -y -p @clize/sites clize-mcp --profile sites
--profile sites exposes this line's tools — clize_claim and clize_deploy_site — plus account status / balance / recharge. The design method (build site), local preview (serve) and image generation (gen image) are CLI commands today, so the agent runs them in a shell; when they get MCP tools, they join this profile. Drop --profile for the full Clize tool set.
clize build site start "a landing page for a 3-person audit firm" # method + style recommendation
clize build site get editorial # one style's full constitution
# ... your agent writes the site into ./site ...
clize build site review # anti-slop + design-fidelity checklist
clize serve site # local preview (Range-aware)
clize claim acme # free acme.clize.app + support@ inbox
clize deploy site --domain acme.clize.app
# or: clize domain buy acme.com --confirm && clize deploy site --domain acme.com
Need artwork? clize gen image "..." --confirm writes files next to the site (it quotes the price first, and only spends on --confirm).
ai.clize/sitesMIT © Clize
FAQs
Sites by Clize — ship a real marketing site from your coding agent: domain, HTTPS and a working inbox included. Installs the Clize CLI + MCP server.
The npm package @clize/sites receives a total of 47 weekly downloads. As such, @clize/sites popularity was classified as not popular.
We found that @clize/sites demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.