
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@ramarivera/fractalglow
Advanced tools
Glamorous OMP-backed chat CLI. aichat-shaped, glow markdown, Julia wait.
Glamorous OMP-backed chat. aichat-shaped CLI, createAgentSession engine,
Julia-set wait animation, fractal coloring on the live line,
glow when the turn settles, chips
you can type or click.
Was briefly named chatoy. Also considered: afterglow, gumball.
aichat talks to OpenRouter. fractalglow reuses ~/.omp/agent auth (romp
luna/o by default). omp -p is a 192MB coding agent; stripped
createAgentSession one-shots are ~1s.
Charm's Go libraries are not imported. Glow is the markdown binary. Spring
physics is a tiny Harmonica equivalent in src/spring.ts. The fractal is a
rotating Julia set (src/fractal.ts) rendered with truecolor half-blocks.
Runtime is Bun (>=1.3.14). Markdown uses the glow
binary.
npm i -g @ramarivera/fractalglow
# or
mise use -g bun
mise use -g npm:@ramarivera/fractalglow
That puts a fractalglow command on PATH. mise's npm backend shims the
package bin; first installs of a new package may need:
[tools]
"npm:@ramarivera/fractalglow" = { version = "0.1.1", allow_low_downloads = true }
From this repo, without publishing:
npm i -g .
# or: bun link
Published on npm. Later versions go through GitHub Actions: bump
package.json, tag vX.Y.Z, push the tag.
On npm, add a GitHub Actions trusted publisher:
ramarivera/fractalglowpublish.ymlDo not add NPM_TOKEN. .github/workflows/publish.yml uses OIDC
(id-token: write) and --provenance, and skips if that version
already exists.
mise install
bun install
mise run test
mise run start -- "Reply with exactly the word pong"
bun run src/main.ts --demo-fractal
bun run src/main.ts -m omp-gateway/openai-codex/gpt-5.6-luna --thinking low "hello"
luna/o needs OMP_AUTH_GATEWAY_TOKEN (see .env.example). Direct Codex
models use OMP AuthStorage only.
After a turn, chips accept 1 retry, 2 shorter, q quit, or a mouse
click on the same labels. -s demo writes ~/.local/share/fractalglow/sessions/demo.jsonl
and reloads it on the next call.
Bare TTY fractalglow is a REPL: .file, .undo, .copy, .set, tab
complete, ::: multiline, Ctrl+R history search.
-e generates a command, prints $ cmd, then y run / r revise /
n skip. --dry-run and -e -c print only. Non-TTY never spawns.
--style/--theme is a glow style name or JSON path. Default
fractalglow is styles/fractalglow.json. Roles live in
~/.config/fractalglow/roles/<name>.md.
MIT. See LICENSE.
FAQs
Glamorous OMP-backed chat CLI. aichat-shaped, glow markdown, Julia wait.
The npm package @ramarivera/fractalglow receives a total of 6 weekly downloads. As such, @ramarivera/fractalglow popularity was classified as not popular.
We found that @ramarivera/fractalglow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.