@cubis/foundry
Advanced tools
@cubis/foundry - npm Package Compare versions
+1
-1
| { | ||
| "name": "@cubis/foundry", | ||
| "version": "0.3.23", | ||
| "version": "0.3.24", | ||
| "description": "Cubis Foundry CLI for workflow-first AI agent environments", | ||
@@ -5,0 +5,0 @@ "type": "module", |
+2
-0
@@ -62,2 +62,3 @@ # Cubis Foundry CLI (`cbx`) | ||
| cbx workflows install --platform codex --postman --postman-workspace-id null | ||
| cbx workflows install --platform codex --postman --postman-workspace-id "<workspace-id>" | ||
| cbx workflows install --platform codex --postman --postman-api-key "<key>" | ||
@@ -87,2 +88,3 @@ cbx workflows install --platform codex --postman --mcp-scope global | ||
| - `--postman-workspace-id null` writes JSON `null` for `defaultWorkspaceId`. | ||
| - If `POSTMAN_API_KEY` is available and install is interactive (no `--yes`) without `--postman-workspace-id`, `cbx` fetches your Postman workspaces and prompts you to pick one as default. | ||
| - Antigravity gets an additional managed file at `.cbx/mcp/antigravity/stitch.json` (or `~/.cbx/mcp/antigravity/stitch.json` in global MCP scope). | ||
@@ -89,0 +91,0 @@ - Stitch key source priority for Antigravity: `--stitch-api-key` then `STITCH_API_KEY`; when unset, generated config keeps placeholder `X-Goog-Api-Key: ur stitch key`. |
Sorry, the diff of this file is too big to display
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Fixed alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
21054287
0.02%- Lines of code
37952
0.24%- Number of lines in readme file
433
0.46%Worsened metrics
- Number of medium supply chain risk alerts
2
100%