
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
@openai/create-sites
Advanced tools
@openai/create-sitesCreate ChatGPT Sites projects.
npm create @openai/sites@latest my-site
npm create @openai/sites@latest my-site -- --yes --add-ons d1,r2
pnpm create @openai/sites@latest my-site --yes --add-ons d1,r2
Use --yes for noninteractive generation. Dependencies are not installed by
default; pass --install to install them. The d1 add-on adds a D1 binding and
Drizzle, r2 adds an R2 binding, and auth adds ChatGPT authentication helpers.
npx --yes @openai/create-sites@latest . \
--yes --add-ons d1,r2
The generated .openai/hosting.json is the source of truth for Sites bindings.
ChatGPT Sites manages deployed databases and buckets; the initializer does not
provision resources or initialize a Git repository.
This package is licensed under the MIT License.
FAQs
Create ChatGPT Sites projects.
The npm package @openai/create-sites receives a total of 12,475 weekly downloads. As such, @openai/create-sites popularity was classified as popular.
We found that @openai/create-sites demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 18 open source maintainers collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.