
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
codemcp-cli
Advanced tools
codemcp CLI and MCP server: one MCP server in front of all your MCP servers, exposing search / describe / execute.
The codemcp command and the MCP server behind it.
codemcp import --write # discover servers from your MCP clients into codemcp.config.json
codemcp tools # connect and list every tool with its pin status
codemcp stubs --detail full # print the TypeScript the model will see
codemcp serve # run the proxy over stdio
Point your MCP client at npx codemcp-cli serve. It advertises three tools, search, describe and execute, plus any passthrough patterns from the config.
Programmatic use:
import { Proxy } from "codemcp-cli";
const proxy = new Proxy({ config: { servers: { shop: { command: "node", args: ["catalog-server.mjs"] } } } });
await proxy.start();
await proxy.server.connect(transport);
FAQs
codemcp CLI and MCP server: one MCP server in front of all your MCP servers, exposing search / describe / execute.
The npm package codemcp-cli receives a total of 571 weekly downloads. As such, codemcp-cli popularity was classified as not popular.
We found that codemcp-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.