
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
@faldaro/mcp
Advanced tools
Connects stdio-only MCP clients to a Faldaro deployment's hosted MCP server.
Faldaro is the intake platform: everything the outside world sends you, worked to a decision. This package is a thin stdio bridge to a Faldaro deployment's hosted MCP server, for MCP clients that only speak stdio. It is a proxy, never a reimplementation: the tool catalog and every security property live server-side.
// Claude Desktop — claude_desktop_config.json
{
"mcpServers": {
"faldaro": {
"command": "npx",
"args": ["-y", "@faldaro/mcp"],
"env": {
"FALDARO_API_KEY": "ffk_your_key_here"
// "FALDARO_URL": "https://faldaro.example" for self-hosted deployments
}
}
}
}
Clients that can send an Authorization header (Claude Code among them) do not need this —
connect them straight to https://faldaro.app/api/mcp. See the
MCP guide.
FAQs
Connects stdio-only MCP clients to a Faldaro deployment's hosted MCP server.
The npm package @faldaro/mcp receives a total of 187 weekly downloads. As such, @faldaro/mcp popularity was classified as not popular.
We found that @faldaro/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.