
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
breadcrumb-cli
Advanced tools

Agents leave notes for other agents.
When an agent fixes a tricky bug or writes code that looks wrong but is intentional, the next agent has no idea. It sees "dead code" and helpfully cleans it up. Or it sees a weird regex and "simplifies" it, breaking a unicode edge case that took hours to debug.
Breadcrumb fixes this. Agents leave notes about files, and future agents see them automatically.
# Agent leaves a note after fixing a tricky bug
breadcrumb add ./src/parser.ts "Regex handles unicode edge cases, don't simplify"
# Future agent reads the file → sees the note automatically
📝 BREADCRUMB: Regex handles unicode edge cases, don't simplify
Requires Bun runtime.
# Install Bun (if you don't have it)
curl -fsSL https://bun.sh/install | bash
# Install breadcrumb
bun add -g breadcrumb-cli
# Initialize in your repo
breadcrumb init
# Add a note about a file
breadcrumb add ./src/auth.ts "OAuth flow depends on specific token format"
# See notes on a file
breadcrumb check ./src/auth.ts
# List all notes
breadcrumb ls
# Remove a note
breadcrumb rm ./src/auth.ts
Comments are passive — they sit in a file hoping to be noticed. Breadcrumbs are injected directly into the agent's context the moment it reads the file. They can't be skimmed over or missed.
Also:
breadcrumb ls shows all notes in a repo# Money calculations - integers avoid floating point errors
breadcrumb add ./src/utils/money.js "All money as integers (cents) to avoid floating point errors. Ceiling for tax is legally required."
# API retry logic tuned for rate limiting
breadcrumb add ./src/api/client.js "Retry delays tuned for rate limiting - 100ms/500ms/2s/5s matches API provider's backoff recommendations"
# SQL injection prevention
breadcrumb add ./src/db/query.js "CRITICAL: Parameterized queries prevent SQL injection. Never use string interpolation for values."
Now when an agent tries to "simplify" this code:
| Request | Agent Response |
|---|---|
| "Use floating point for money" | ❌ Refuses - cites precision errors |
| "Simplify retry to fixed 1s delay" | ⚠️ Warns about rate limit tuning |
| "Use template literals for SQL" | ❌ Hard refuses - SQL injection risk |
| "Do a full code review and simplify" | ✅ Reports all code is intentionally designed |


| Command | Description |
|---|---|
init | Create .breadcrumbs.json in current repo |
add <path> <message> | Add a note about a file |
check <path> | See notes on a file |
ls | List all notes |
rm <path> | Remove a note |
For Claude Code users, the plugin auto-shows notes when reading files:
# Install from marketplace
/plugin marketplace add tylergibbs1/breadcrumb
/plugin install breadcrumb@breadcrumb-marketplace
The plugin:
.breadcrumbs.json on session startBreadcrumb works with any AI agent system that can run shell commands.
| Component | Requirement |
|---|---|
CLI (breadcrumb) | Bun runtime |
.breadcrumbs.json | Plain JSON - works everywhere |
| Claude Code plugin | Optional integration |
For other tools (Cursor, Windsurf, Aider), add to your system prompt or equivalent:
breadcrumb check <file>breadcrumb add <file> "message"Notes are stored in .breadcrumbs.json at repo root:
{
"version": 2,
"breadcrumbs": [
{
"id": "b_1a2b3c",
"path": "src/utils/money.js",
"message": "All money as integers (cents) to avoid floating point errors",
"severity": "info",
"added_at": "2026-01-10T14:30:00Z"
}
]
}
MIT
FAQs

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.