
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@cratestack/cli
Advanced tools
Prebuilt cratestack-cli binary, fetched from GitHub Releases on install. No Rust toolchain required.
npm wrapper around cratestack-cli — the CrateStack
.cstack schema validator and client/Studio code generator. Installing this package downloads the
prebuilt cratestack binary matching your platform from the matching
GitHub Release; no Rust toolchain required.
npm install --global @cratestack/cli
Or run without installing:
npx @cratestack/cli --help
macOS (x64, arm64), Linux (x64, arm64), Windows (x64). See
cratestack-cli for the
full command reference (check, generate-dart, generate-typescript, studio, print-ir, contract).
The postinstall script (scripts/install.js) detects your OS/architecture, downloads the
matching release archive plus its .sha256 checksum from GitHub Releases, verifies the checksum,
and extracts the cratestack binary into bin/. The cratestack command then execs that binary.
Environment variables:
CRATESTACK_CLI_SKIP_DOWNLOAD=1 — skip the postinstall download (e.g. offline/vendored installs
that provide the binary another way).CRATESTACK_CLI_BINARY_PATH=/path/to/cratestack — run a specific binary instead of the one
downloaded at install time.If the download fails or your platform isn't yet supported, fall back to:
cargo binstall cratestack-cli
# or
cargo install cratestack-cli
MIT
FAQs
Prebuilt cratestack-cli binary, fetched from GitHub Releases on install. No Rust toolchain required.
We found that @cratestack/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.