
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@slicemedia/create-devkit
Advanced tools
@slicemedia/create-devkitStarts an interactive wizard for a new neutral TypeScript Webflow project. The optional directory
argument follows the convention used by established project creators. Run the 0.1.0 release
candidate through the npm next tag with any supported package manager:
npm create @slicemedia/devkit@next my-webflow-project
pnpm dlx @slicemedia/create-devkit@next my-webflow-project
yarn dlx @slicemedia/create-devkit@next my-webflow-project
Without a directory argument, the wizard proposes webflow-project. A literal . selects the
current directory, which must be empty. The wizard asks for the npm name, package manager (pnpm,
npm, or Yarn), optional capabilities, agent instruction targets, dependency installation, and final
confirmation. Use Space to select or clear items in the multi-select lists, then press Enter to
continue. It never overwrites a non-empty directory. Capabilities are opt-in and generate typed
integration modules that remain disconnected from the project entry until the project chooses to
compose them.
Agent targets add the independent @slicemedia/agent-kit package and a deterministic
agents:generate script. Run it through the selected package manager after installation to create
only the selected platform files; DevKit does not bundle the Agent Kit source.
The Webflow Agent Instructions target does not install another AI service or MCP server. It
generates an importable Markdown ZIP and integrity manifest under .slicemedia/agent-kit/. After
review, the ZIP can be imported into the intended Webflow site's Instructions panel so Webflow AI
and external agents connected through the official Webflow MCP server can use the site-stored rules
and skills.
The package also exports the deterministic scaffoldProject() API with schema-v2 options and
receipts for programmatic consumers, including the chosen package manager. DevKit source is MIT
licensed; generated client projects remain project-owned and receive no automatic license.
See Slice Media's support policy for help and maintenance expectations. Report vulnerabilities through the DevKit security policy, not a public issue.
This package is independently developed by Slice Media and is not affiliated with, endorsed by, or sponsored by Webflow, Inc. Webflow and related marks belong to their respective owners. AI tools materially assisted its implementation and documentation; production use still requires human review, accessibility and security checks, and project-specific testing.
FAQs
Bootstrap placeholder for the @slicemedia/create-devkit package identity; not a functional release.
The npm package @slicemedia/create-devkit receives a total of 0 weekly downloads. As such, @slicemedia/create-devkit popularity was classified as not popular.
We found that @slicemedia/create-devkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.