
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@droidagentkit/launcher
Advanced tools
Thin Node launcher for the DroidAgentKit JVM MCP server. Locates the `droidagent` CLI (or a fetched archive), verifies its SHA-256, and spawns `droidagent serve-mcp --transport stdio`. Node is an install-time dependency only; the server runtime is pure JV
Thin Node launcher for the DroidAgentKit JVM MCP server.
droidagent-cli-<version>.jar matching this
package's version from GitHub Releases,
verifies its SHA-256, caches it under ~/.droidagentkit/cli/, and runs
java -jar <jar> serve-mcp --transport stdio --project auto. Later runs reuse the cached,
already-verified jar without hitting the network again.droidagent-mcp --version prints immutable launcher/server version metadata.PATH (the same prerequisite as building from source).DROIDAGENT_BIN — absolute path to an existing droidagent CLI; skips auto-fetch entirely.DROIDAGENT_CACHE_DIR — change where the downloaded jar is cached.npx -y @droidagentkit/launcher --version
or install it once:
npm install -g @droidagentkit/launcher
droidagent-mcp --version
A checksum mismatch, a failed download, or a missing java on PATH all exit non-zero with a
clear message instead of silently degrading the MCP connection or running unverified code.
../smoke-test.sh # exercises --version/--help, the auto-fetch/cache/checksum paths, and
# (with DROIDAGENT_E2E=1) a real stdio round-trip against a built CLI
The npm launcher is the primary install path; MCPB is secondary. See
.github/workflows/release.yml for the release pipeline that publishes this package.
FAQs
Thin Node launcher for the DroidAgentKit JVM MCP server. Locates the `droidagent` CLI (or a fetched archive), verifies its SHA-256, and spawns `droidagent serve-mcp --transport stdio`. Node is an install-time dependency only; the server runtime is pure JV
We found that @droidagentkit/launcher demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.