
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
CLI tool for scaffolding BA-Kit into your projects.
npm install -g ba-kit-cli
# Create new project directory and initialize BA-Kit
ba-kit new my-project
# Initialize in current directory
ba-kit init
# Initialize in specific directory
ba-kit init ./my-project
# Force overwrite existing installation
ba-kit init --force
# Use specific branch
ba-kit init --branch develop
Create new project directory with BA-Kit initialized.
ba-kit new my-project # Create and initialize project
ba-kit new my-project --force # Overwrite existing directory
ba-kit new my-project --branch develop # Use specific branch
Options:
-f, --force - Overwrite existing directory-b, --branch <branch> - Branch to use (default: main)Initialize BA-Kit in current or specified directory.
ba-kit init # Initialize in current directory
ba-kit init ./my-project # Initialize in specific directory
ba-kit init --force # Overwrite existing .agent/ folder
ba-kit init --branch develop # Use develop branch
ba-kit init --local /path/to/ba-kit # Use local source
Options:
-f, --force - Overwrite existing .agent/ folder-b, --branch <branch> - Branch to use (default: main)-l, --local <path> - Use local ba-kit source instead of GitHubShow BA-Kit installation status and check for modifications.
ba-kit status # Show installation status
ba-kit status --remote # Check against remote for updates
Options:
--remote - Check against remote for updatesUpdate BA-Kit to latest version with conflict resolution.
ba-kit update # Interactive update with conflict resolution
ba-kit update --yes # Auto-accept non-conflicting updates
ba-kit update --dry-run # Preview changes without applying
ba-kit update --local /path/to/ba-kit # Use local source
Options:
-y, --yes - Auto-accept non-conflicting updates--dry-run - Show changes without applying-l, --local <path> - Use local ba-kit sourceRestore modified files to original version.
ba-kit restore # Interactive file selection
ba-kit restore skills/core/planning.md # Restore specific file
ba-kit restore --all # Restore all modified files
ba-kit restore --all --yes # Restore all without confirmation
ba-kit restore --local /path/to/ba-kit # Use local source
Options:
-a, --all - Restore all modified files-y, --yes - Skip confirmation prompt-l, --local <path> - Use local ba-kit sourceManage download cache for BA-Kit archives.
ba-kit cache # Show cache information
ba-kit cache --clear # Clear the download cache
Options:
--clear - Clear the download cacheGenerate shell completion script for bash, zsh, or fish.
# Bash
ba-kit completion bash >> ~/.bashrc
# Zsh
ba-kit completion zsh > ~/.zsh/completions/_ba-kit
# Fish
ba-kit completion fish > ~/.config/fish/completions/ba-kit.fish
Supported shells: bash, zsh, fish
These options work with all commands:
ba-kit -V # Display version
ba-kit --version # Display version
ba-kit -h # Display help
ba-kit --help # Display help
ba-kit -v # Enable verbose output
ba-kit --verbose # Enable verbose output
ba-kit -q # Suppress non-essential output
ba-kit --quiet # Suppress non-essential output
ba-kit --json # Output in JSON format (for scripting)
| Option | Description |
|---|---|
-V, --version | Display version |
-h, --help | Display help |
-v, --verbose | Enable verbose output |
-q, --quiet | Suppress non-essential output |
--json | Output in JSON format (for scripting) |
BA-Kit CLI uses a manifest-based approach to track files:
.agent/, creates manifest with SHA-256 hashesThe manifest file (.agent/.ba-kit-manifest.json) tracks:
When both local and upstream files have changed, the update command offers:
# Clone the repo
git clone https://github.com/anthropics/ba-kit-cli.git
cd ba-kit-cli
# Install dependencies
npm install
# Link for local development
npm link
# Test with local ba-kit source
ba-kit init --local /path/to/ba-kit
MIT
FAQs
CLI tool for scaffolding BA-Kit into projects
The npm package ba-kit-cli receives a total of 2 weekly downloads. As such, ba-kit-cli popularity was classified as not popular.
We found that ba-kit-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.