
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@sapiom/cli
Advanced tools
The Sapiom command-line interface — scaffold, validate, and ship Sapiom agents.
The Sapiom command-line interface.
npm install -g @sapiom/cli
# or run without installing:
npx @sapiom/cli <command>
Launch a local coding environment with MCP pre-wired and your agent running in an embedded terminal:
sapiom dev [dir] # open the harness in the current (or given) directory
sapiom dev --port 4200 # use a custom port
sapiom dev --no-open # skip opening the browser automatically
sapiom dev requires @sapiom/harness to be installed. Install it once with:
npm install -g @sapiom/harness
sapiom agents init my-app # scaffold a new agent project
sapiom agents check # validate locally (bundle, manifest, graph)
sapiom agents deploy # build and ship
Run a deployed agent on a schedule — recurring (cron) or once at a set time:
sapiom agents schedule preview "0 9 * * 1-5" # check a cron before using it
sapiom agents schedule create my-app --cron "0 9 * * 1-5" --timezone America/New_York
sapiom agents schedule create my-app --at 2026-07-01T17:00:00Z # one-off
sapiom agents schedule list my-app # list an agent's schedules
sapiom agents schedule inspect <scheduleId> # config, next fire, recent fires
sapiom agents schedule cancel <scheduleId>
Run sapiom agents --help for the full command set. Every command accepts
--json for machine-readable output.
The CLI can emit anonymous usage events through
@sapiom/analytics-core:
one command.run event per executed command, carrying the command name, the
names of the flags used (never their values or arguments), the duration, and
the exit status. Nothing is currently sent anywhere. When delivery is
enabled, it is best-effort and can never fail a command: it never slows
command execution, and on exit a final flush is bounded by the emitter's
5-second request timeout — retries never hold the process open. Opt out at
any time with SAPIOM_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1.
FAQs
The Sapiom command-line interface — scaffold, validate, and ship Sapiom agents.
We found that @sapiom/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.