
Security News
PHP Patches Critical RCE Vulnerabilities, Organizations Urged to Take Unpatched Sites Offline
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
@pdpp/read-core
Advanced tools
Pure, adapter-agnostic primitives for shaping PDPP read results into bounded previews, continuation descriptors, handle metadata, and escalation paths.
@pdpp/read-core contains pure, adapter-agnostic primitives for shaping PDPP
read results into bounded previews, continuation descriptors, handle metadata,
and deliberate escalation paths.
It is the shared core consumed by independently-installed read adapters
(@pdpp/mcp-server, @pdpp/cli, and future REST/SDK adapters). Given records,
record-sets, or field reads, it returns structured, bounded descriptors that
any adapter can render — the adapter decides how to present them.
In scope — pure read shaping only:
Out of scope — keep these in the adapter or server layers:
The package keeps a deliberately small, stable public API so adapters can build against it safely.
This package does not currently publish declaration files. Its public contract is the emitted JavaScript root export; declarations will be added only with an explicit typed API contract.
FAQs
Pure, adapter-agnostic primitives for shaping PDPP read results into bounded previews, continuation descriptors, handle metadata, and escalation paths.
The npm package @pdpp/read-core receives a total of 72 weekly downloads. As such, @pdpp/read-core popularity was classified as not popular.
We found that @pdpp/read-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.