
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
@stackone/agent-config
Advanced tools
Configuration utilities and shared agent instructions for StackOne projects
Configuration utilities for StackOne projects. This package provides access to reusable agent instructions (CLAUDE.md) that can be shared across multiple repositories.
This package provides a simple way to import and use the shared StackOne agent configuration (CLAUDE.md) in any TypeScript or JavaScript project. It's published as a public npm package to https://registry.npmjs.org.
What it does:
CLAUDE.mdInstall via npm:
npm install @stackone/agent-config
Or add to your package.json:
Copy CLAUDE.md to your project:
npx stackone-agent-pull
Or use the installed binary:
stackone-agent-pull
import { getConfig, addConfig } from "@stackone/agent-config";
// Read config as string
const config = getConfig();
console.log(config);
// Copy to CLAUDE.md in current working directory
addConfig();
const fs = require("fs");
const path = require("path");
const agentMdPath = require.resolve("@stackone/agent-config/agent.md");
const config = fs.readFileSync(agentMdPath, "utf8");
Create .github/workflows/update-claude-md.yaml:
name: Update CLAUDE.md
on:
schedule:
- cron: '0 2 * * *' # Daily at 2 AM UTC
workflow_dispatch: # Manual trigger
jobs:
update:
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: '20'
- name: Install dependencies
run: npm ci
- name: Install package
run: npm install "@stackone/agent-config@latest" --save
- name: Pull latest CLAUDE.md
run: npx stackone-agent-pull
- name: Check for changes
id: check
run: |
if git diff --quiet CLAUDE.md; then
echo "changed=false" >> $GITHUB_OUTPUT
else
echo "changed=true" >> $GITHUB_OUTPUT
fi
- name: Commit and push changes
if: steps.check.outputs.changed == 'true'
run: |
git config --local user.email "action@github.com"
git config --local user.name "GitHub Action"
git add CLAUDE.md
git commit -m "chore: update CLAUDE.md from @stackone/agent-config"
git push
getConfig() - Returns CLAUDE.md content as stringaddConfig() - Copies CLAUDE.md to current working directoryThis package is automatically published to npm when changes are pushed to main branch:
packages/config/main branchManual publishing:
cd packages/config
npm run build
npm publish --access restricted
npm run build # Build TypeScript to dist/
npm run test # Run tests
npm run lint # Check code quality
npm run lint:fix # Auto-fix issues
This is a public package, so no authentication is required for installation.
ISC
FAQs
Configuration utilities and shared agent instructions for StackOne projects
We found that @stackone/agent-config demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain