
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@zachleat/flex-luthor
Advanced tools
A small wrapper library to help with responsive intrinsic-sized Flexbox layouts that wrap based on content and container width and avoiding viewport-based media queries.
A small wrapper library to help with responsive intrinsic-sized Flexbox layouts that wrap based on content and container width (avoiding viewport-based media queries when possible).
https://flex-luthor.zachleat.dev/
Available on npm.
npm install @zachleat/flex-luthor --save
v4.0.0: Margin feature renamed more accurately to Gap: --fl-margin is now --fl-gap. Gap now defaults to .5em 1em (.5em vertical, 1em horizontal). You can reset this to 0 if needed.v3.0.0: Forked from filamentgroup/flex-luthor and updated to support Flexbox with gap.FAQs
A small wrapper library to help with responsive intrinsic-sized Flexbox layouts that wrap based on content and container width and avoiding viewport-based media queries.
The npm package @zachleat/flex-luthor receives a total of 42 weekly downloads. As such, @zachleat/flex-luthor popularity was classified as not popular.
We found that @zachleat/flex-luthor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.