
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@locus-dev/cli
Advanced tools
Command-line tool for managing stories.yaml — init, list, add, audit, sync, coverage, validate
Command-line tool for managing stories.yaml — the open format for product intent.
npm i -g @locus-dev/cli
locus init Create a stories.yaml scaffold in the current repo
locus list List all stories (table format)
locus add Interactive story creation wizard
locus audit Detect drift between code and stories.yaml
locus coverage Show coverage % and breakdown
locus validate Validate stories.yaml against the spec
locus sync --linear Push stories to Linear
locus sync --github Push stories to GitHub Issues
locus sync --jira Push stories to Jira
locus init
Creates a stories.yaml with the Locus JSON Schema header so editors validate it inline.
locus list
locus list --status not-implemented
locus list --section Auth
locus list --json
Interactive:
locus add
Or with flags (non-interactive):
locus add --id auth-sso --title "SSO login" --section Auth --status not-implemented
Scan your codebase and flag stories that may be drifting from reality:
locus audit
locus audit --dir ./src --ext ts,tsx
locus audit --story auth-sso
locus audit --json
locus coverage
locus coverage --section Auth
locus coverage --json
locus validate
Exits non-zero on any error — safe to add to CI.
Push stories to your issue tracker:
# Linear
LINEAR_API_KEY=lin_api_xxx locus sync --linear
# GitHub Issues
GITHUB_TOKEN=ghp_xxx GITHUB_REPOSITORY=owner/repo locus sync --github
# Jira
JIRA_HOST=https://acme.atlassian.net \
JIRA_EMAIL=user@example.com \
JIRA_TOKEN=xxx \
JIRA_PROJECT_KEY=LOCUS \
locus sync --jira
locus discovers stories.yaml automatically:
LOCUS_STORIES_PATH env var (explicit path)stories.yaml / stories.yml / stories.json in current directoryMIT
FAQs
Command-line tool for managing stories.yaml — init, list, add, audit, sync, coverage, validate
The npm package @locus-dev/cli receives a total of 12 weekly downloads. As such, @locus-dev/cli popularity was classified as not popular.
We found that @locus-dev/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.