
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@factiii/stack
Advanced tools
Infrastructure management CLI. Scan, fix, and deploy Node.js apps to AWS with Docker, Nginx, and GitHub Actions.
npm install @factiii/stack
npx stack # Self-bootstrap + scan
npx stack init # First-time vault/secrets setup
npx stack scan --dev # Read-only issue detection
npx stack fix --dev # Auto-fix detected issues
npx stack deploy --staging # Scan then deploy
| Command | Description |
|---|---|
npx stack | Self-bootstrap + scan (default) |
npx stack init | First-time vault/secrets setup |
npx stack scan [--stage] | Read-only issue detection |
npx stack fix [--stage] | Auto-fix detected issues |
npx stack deploy --<stage> | Scan then deploy |
npx stack deploy --secrets <action> | Manage Ansible Vault secrets |
npx stack db <cmd> --<stage> | Database operations (migrate, seed, reset, status) |
npx stack ops <cmd> --<stage> | Server operations (logs, restart, shell, status) |
npx stack backup <cmd> --<stage> | Database backup/restore |
npx stack dev-reset [--dry-run] | Reset local config/secrets for fresh bootstrap |
--dev, --secrets, --staging, --prod
Routing priority:
dev / secrets → always runs locallystaging / prod → tries SSH key (~/.ssh/{stage}_deploy_key) → falls back to GitHub Actions workflow → unreachable| File | Purpose | Editable By |
|---|---|---|
stack.yml | Manual settings (committed) | User |
stackAuto.yml | Auto-detected settings | Stack CLI |
stack.local.yml | Per-developer overrides (gitignored) | User |
Legacy factiii.yml is also supported.
Pipelines — CI/CD routing: factiii, aws
Servers — OS-specific commands: mac, ubuntu, windows, amazon-linux
Frameworks — App scaffolding: prisma-trpc, expo
Addons — Extensions: server-mode (hardening), openclaw (AI agent), auth (@factiii/auth integration)
Plugins auto-detect from your project. No manual registration needed.
Two IAM users per project:
factiii-{project}-devfactiii-{project}-prodProvisioning covers EC2, RDS, VPC, ECR, Route 53, and S3.
npx stack — bootstrap (installs deps, detects frameworks, generates config)npx stack init — create vault, store secretsnpx stack fix --staging — provision infrastructure, push workflowsnpx stack deploy --staging — scan, build, deploy via SSH or GitHub ActionsWorkflows are ultra-thin: trigger + secrets + SSH + CLI call. No setup/clone/build logic in CI.
ssh -i ~/.ssh/deploy_key "$USER@$HOST" \
"GITHUB_ACTIONS=true npx stack deploy --staging"
MIT
FAQs
Infrastructure management package for deploying services to servers
The npm package @factiii/stack receives a total of 0 weekly downloads. As such, @factiii/stack popularity was classified as not popular.
We found that @factiii/stack demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.