
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@useoptic/openapi-cli
Advanced tools
oas cliIntall oas as part of installing optic:
npm install -g @useoptic/optic
Create new and update existing OpenAPI specifications straight from your services' traffic. Optic makes it easy to adopt OpenAPI in a day, without changing how you work.
Show Optic real API traffic using the oas capture commands. Traffic can come from your development environment, tests, or the browser.
oas capture --proxy localhost:3000 traffic.har
Captured traffic is like working copy in Git. Use oas status to see the difference between how your OpenAPI specification says your API works, and how it actually works.
oas openapi.yaml status --har traffic.har
Run oas add and oas update to update the spec. Optic precision patches your OpenAPI file with the same additions, updates, and removals you would manually write. This is faster and much less error-prone than writing OpenAPI by hand.
oas openapi.yaml add --har traffic.har GET /lists
oas openapi.yaml update --har traffic.har
A collaborator, not a generator
Using
oasto update your spec is like working with a collaborator. It helps you write all the boilerplate OpenAPI and keep your spec in sync with the actual API's behavior.✅ Never overwrites changes developers make to the same OpenAPI file
✅ Respects $refs across multiple files
✅ Improves accuracy of your specification
✅ Speeds up your team
FAQs
Unknown package
We found that @useoptic/openapi-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.