
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
@nimblebrain/mpak
Advanced tools
CLI for downloading MCPB bundles and Agent Skills from the mpak registry.
npm install -g @nimblebrain/mpak
Search across both bundles and skills:
mpak search <query>
mpak search <query> --type bundle
mpak search <query> --type skill
# Search bundles
mpak bundle search <query>
# Show bundle details
mpak bundle show @scope/name
# Download a bundle
mpak bundle pull @scope/name
mpak bundle pull @scope/name@1.0.0
# Run an MCP server from the registry
mpak run @scope/name
mpak bundle run @scope/name --update
mpak bundle run --local ./path/to/bundle.mcpb
# Validate a skill directory
mpak skill validate ./path/to/skill
# Pack a skill into a .skill bundle
mpak skill pack ./path/to/skill
# Search skills in the registry
mpak skill search <query>
# Show skill details
mpak skill show @scope/name
# Download a .skill bundle
mpak skill pull @scope/name
# Install a skill to ~/.claude/skills/
mpak skill install @scope/name
# List installed skills
mpak skill list
# Set config values for a package
mpak config set @scope/name api_key=xxx
# View stored config (values are masked)
mpak config get @scope/name
# List packages with config
mpak config list
# Clear config
mpak config clear @scope/name
mpak config clear @scope/name api_key
# Build
pnpm build
# Run tests
pnpm test
# Type checking
pnpm typecheck
# Lint
pnpm lint
Apache-2.0
FAQs
CLI for downloading MCPB bundles from the mpak registry
The npm package @nimblebrain/mpak receives a total of 21 weekly downloads. As such, @nimblebrain/mpak popularity was classified as not popular.
We found that @nimblebrain/mpak demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.