
Security News
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.
@hebcal/mcp
Advanced tools
Hebcal (pronounced HEEB-kal, as in Hebrew calendar) is a free Jewish calendar and holiday web site.
Our mission is to increase awareness of Jewish holidays and to help Jews to be observant of the mitzvot.
This repository is the MCP server equivalent of the powerful custom Jewish calendar tool that lets you generate a list of Jewish holidays for any year (past, present or future).
Also available are a Hebrew date converter, Shabbat candle lighting times and Torah readings (both full kriyah and triennial system), and a page to look up yahrzeits, birthdays and anniversaries.
This MCP server can run in two modes:
Stdio Mode (default): Communicates over standard input/output.
npm install
npm run build
node build/cli.js
Server-Sent Events (SSE) Mode: Communicates over HTTP using SSE.
npm install
npm run build
node build/server.js
The SSE endpoint will be available at http://localhost:8080/mcp by default. You can configure the port using the NODE_PORT environment variable (e.g., NODE_PORT=3000 node build/server.js).
You can test the SSE endpoint with curl:
curl -N http://localhost:8080/mcp
Then, in a separate terminal, you can send MCP requests (as JSON) to the server via its stdin if you are also running it in stdio mode, or by sending HTTP POST requests if you were to implement an HTTP ingress for requests. For now, the SSE transport only handles outgoing messages. For a full duplex SSE communication, the client would also need to send requests to the server (e.g. via POST requests to a different endpoint). This example focuses on the server sending events to the client.
FAQs
Model Context Protocol extension for Hebrew calendar
The npm package @hebcal/mcp receives a total of 60 weekly downloads. As such, @hebcal/mcp popularity was classified as not popular.
We found that @hebcal/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.

Research
/Security News
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.