
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
AI-first web framework with signal-based reactivity, atomic CSS, and a structured registry of 100+ components.
The AI-native web framework. Zero dependencies. Native JS/CSS/HTML.
Frameworks were designed for humans. Decantr is designed for AI.
Traditional frameworks (React, Vue, Angular) were built for humans to write. AI doesn't think in JSX and hooks — it thinks in registries, tokens, and compositions. Decantr speaks AI's language: a machine-readable registry, atomic CSS tokens, and a structured generation pipeline that turns plain-English descriptions into production apps.
POUR → SETTLE → CLARIFY → DECANT → SERVE → AGE
you AI AI+you AI AI ongoing
describe decomposes crystallizes resolves generates guards
intent layers the Essence layout code against drift
Every app starts as a conversation. You describe what you want, the AI decomposes it into layers (Terroir, Vintage, Character, Structure, Tannins), writes the Essence file, and generates code — all validated against Cork rules that prevent drift.
| SaaS Dashboard | eCommerce Admin | Gaming Platform |
|---|---|---|
| 14-page analytics | 15-page merchant panel | Guild hub with leaderboards |
| View Live → | View Live → | View Live → |
npx decantr init my-app
cd my-app && npm install
npx decantr dev
Then tell your AI: "Build me a SaaS dashboard with KPI cards, charts, and a data table."
Node.js >= 20.0.0
MIT
FAQs
AI-first web framework with signal-based reactivity, atomic CSS, and a structured registry of 100+ components.
We found that decantr demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.