
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@layers/amba
Advanced tools
amba — agent-native backend-as-a-service. Functions, collections, storage, AI, email, queues, sites, and `amba ship` to take an Expo app live on the App Store + Google Play. `npx @layers/amba init` to start.
Amba is the agent-native backend-as-a-service for mobile and web apps. This package is the amba command-line interface.
npm install -g @layers/amba
…or run on demand:
npx @layers/amba init
Requires Node.js 22 or newer.
For AI coding agents (Claude Code, Cursor, Windsurf): one command, no browser, no prompts.
npx @layers/amba init --sandbox
This signs up an agent-mode developer account, provisions a project,
writes .env.local + AMBA.md, auto-wires mcpServers.amba into
every MCP client config it finds on disk, and installs the
/amba-build Claude Code skill at .claude/skills/amba-build/SKILL.md.
After restarting your MCP client, paste:
/amba-build <design-url-or-description>
…to scaffold a full Expo app with Amba as the only backend. The skill
fetches the canonical prompt from
https://docs.amba.dev/prompts/expo-build at invocation time and
falls back to an inlined snapshot when offline. Use --no-skills to
skip the skill install.
amba init # mint a personal project and write .amba/ config
amba login # browser-based auth (skip with --token / AMBA_PAT)
amba projects list
Check the project is live:
amba status --detailed
amba functions deploy ./functions/hello.ts
amba collections create messages --field user_id:uuid --field body:text
amba types generate # emits .amba/types.d.ts
amba secrets set OPENAI_KEY --function hello --from-stdin
amba sites deploy ./out --name marketing
Pass a Personal Access Token via --token <pat> or AMBA_PAT to skip the browser login.
Full reference: https://docs.amba.dev/cli.
Apache-2.0
FAQs
amba — agent-native backend-as-a-service. Functions, collections, storage, AI, email, queues, sites, and `amba ship` to take an Expo app live on the App Store + Google Play. `npx @layers/amba init` to start.
The npm package @layers/amba receives a total of 7 weekly downloads. As such, @layers/amba popularity was classified as not popular.
We found that @layers/amba demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.