
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@compligent/nice-mcp-cli
Advanced tools
MCP CLI client for Compligent NICE Workforce Framework server with hosted database integration
NPX client for Compligent's NICE Workforce Framework MCP server with integrated database capabilities.
# Use with Claude Desktop or other MCP clients
npx @compligent/nice-mcp-cli@latest
Add to your claude_desktop_config.json:
{
"mcpServers": {
"compligent-nice": {
"command": "npx",
"args": ["@compligent/nice-mcp-cli@latest"],
"env": {
"NODE_ENV": "production"
}
}
}
}
For premium integrated workforce features:
{
"mcpServers": {
"compligent-nice": {
"command": "npx",
"args": ["@compligent/nice-mcp-cli@latest"],
"env": {
"NODE_ENV": "production",
"COMPLIGENT_API_KEY": "your-api-key-here"
}
}
}
}
Get your API key at compligent.io/api-keys
This NPX client uses Compligent's hosted integrated database approach:
# Ask Claude:
"Can you list the NICE Framework work roles in the Operations and Governance category?"
"Generate a job description for NICE work role OG-WRL-001"
"What are the key competencies for a Security Analyst role?"
# Ask Claude (Premium):
"Map NICE role OG-WRL-001 to relevant NIST CSF functions"
"Create a unified workforce plan that covers both NICE competencies and SP 800-53 control requirements"
"Analyze our cybersecurity workforce gaps across NICE, CSF, and CUI compliance requirements"
"Generate a career progression path from Security Analyst to CISO that includes compliance framework expertise"
# Local development
git clone https://github.com/compligent/nice-mcp-cli
cd nice-mcp-cli
npm install
npm link
# Test locally
node index.js
MIT © Compligent
Ready to transform your workforce planning with integrated compliance? Get started at compligent.io
FAQs
MCP CLI client for Compligent NICE Workforce Framework server with hosted database integration
We found that @compligent/nice-mcp-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.