
Security News
Packagist Urges Immediate Composer Update After GitHub Actions Token Leak
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.
https://github.com/user-attachments/assets/5478763d-57c5-4201-8ee7-a4e6239a8bcf
bizi is a better way to manage dependent concurrent tasks.
[!WARNING] This is still in early development breaking changes are likely.
If you have ever worked in a monorepo with multiple different tasks that depend on each other (for instance running your API in dev and running your web app in dev). Initially you might reach for something like concurrently to run this tasks in parallel. This works great until the moment where you need to restart one of the tasks, at which point you have no choice but to restart both tasks.
This is where bizi comes in. bizi allows you to define concurrent dependent tasks so and run them separately so that you can cancel, and restart them without effecting the other tasks.
The benefits go beyond just that though... Have you ever had that problem working with llms where they want to run their own dev server? bizi solves this by allowing llms to hook into the logs of your existing dev server run instead of spinning up their own.
This will install the server and start it as a background service.
curl -fsSL https://getbizi.dev/install | bash
Currently the only client is the TUI.
pnpm install -g bizi
{
"$schema": "https://getbizi.dev/schemas/task.config.json",
"tasks": {
"dev": {
"tasks": {
"api": {
"cwd": "./apps/api",
"command": "dotnet run"
},
"site": {
"cwd": "./apps/site",
"command": "pnpm dev"
},
}
},
}
}
Start the TUI from your project directory (where your task.config.json is):
bizi
Or specify a working directory:
bizi -cwd /path/to/project
You can also use CLI commands instead of the TUI (Perfect for your agents):
bizi run <task> # Run a task
bizi cancel <task> # Cancel a running task
bizi stat <task> # Show task status
FAQs
Terminal UI for bizi
We found that bizi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.

Company News
Socket was named to the Rising in Cyber 2026 list, recognizing 30 private cybersecurity startups selected by CISOs and security executives.