
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@vox-ai-app/tools
Advanced tools
Core tool infrastructure for Vox: exec utilities, schema validation, builtins (filesystem, shell, fetch), document builders (Word, PDF, PPTX), LLM tool definitions, and the tool registry.
npm install @vox-ai-app/tools
Peer dependency: electron >= 28
| Export | Contents |
|---|---|
@vox-ai-app/tools | All core exports |
@vox-ai-app/tools/exec | Exec utilities |
@vox-ai-app/tools/schema | Validation helpers |
@vox-ai-app/tools/network | URL safety checks |
@vox-ai-app/tools/registry | Tool registry |
The registry holds all registered tools (builtins + MCP) and dispatches run() calls.
import {
registerAll,
registerMcp,
unregisterMcp,
closeAllMcp,
getDeclarations,
run,
setOnChange,
setLogger
} from '@vox-ai-app/tools/registry'
setLogger(logger)
setOnChange(() => {
/* tool list changed */
})
registerAll(tools)
const { client, tools } = await connectMcpServer(server)
registerMcp(server, client, tools)
const result = await run('read_file', { path: '~/notes.md' }, { signal })
import { createWordDocument, createPdfDocument, createPresentationDocument } from '@vox-ai-app/tools'
await createWordDocument({ path: '~/report.docx', content: '# Title\n\nBody text.' })
await createPdfDocument({ path: '~/report.pdf', content: '# Title\n\nBody text.' })
await createPresentationDocument({ path: '~/slides.pptx', slides: [...] })
import { execAsync, execAbortable, esc, writeTempScript, cleanupTemp } from '@vox-ai-app/tools/exec'
const { stdout } = await execAsync('ls -la', { timeout: 10_000 })
const { stdout } = await execAbortable('long-cmd', { timeout: 30_000 }, signal)
MIT
FAQs
Tool infrastructure, builtins, docs, and definitions for Vox
The npm package @vox-ai-app/tools receives a total of 5 weekly downloads. As such, @vox-ai-app/tools popularity was classified as not popular.
We found that @vox-ai-app/tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.