
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@mattstack/rt-client
Advanced tools
Typed client for the rt daemon: repos, worktrees, ports, tokens, and the event relay
Typed client for the rt daemon.
rt keeps the per-repo state a dev environment needs: worktrees, assigned ports, tokens, dev servers, and a live event relay. This package is how other programs read and drive that state without shelling out to the CLI and parsing text.
bun add @mattstack/rt-client
import { rtCommand, readProjectMRs } from '@mattstack/rt-client';
const repos = await rtCommand(['repos', 'list']);
const mrs = await readProjectMRs('group/repo');
Requires a running rt daemon. Install rt from the latest GitHub Release
(./rt --post-install), then rt verify.
Bun-only: the settings exec path (src/settings/exec.ts) shells out via
Bun.spawn, so this package does not run under Node.
@mattstack/glance is a peer dependency: rt-client returns glance's forge types
so merge request shapes stay identical across rt, gitq, and mr-board.
MIT
FAQs
Typed client for the rt daemon: repos, worktrees, ports, tokens, and the event relay
The npm package @mattstack/rt-client receives a total of 0 weekly downloads. As such, @mattstack/rt-client popularity was classified as not popular.
We found that @mattstack/rt-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.