
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@cymule/sdk
Advanced tools
This package authors cymule.ir/1 Plan Candidates and calls a trusted Cymule
Engine. It does not implement canonical sealing or runtime semantics.
npm install cymule
import { CliEngine, FlowBuilder } from "cymule";
The package is published from GitHub Actions with npm trusted publishing and provenance. The Rust Engine remains the semantic authority.
FAQs
TypeScript authoring and engine client SDK for Cymule
The npm package @cymule/sdk receives a total of 12 weekly downloads. As such, @cymule/sdk popularity was classified as not popular.
We found that @cymule/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.