
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
Framework-neutral foundation for building generic DevTools — RPC layer (birpc + valibot + WS presets), six hosts (RPC / docks / views / terminals / logs / commands / agent), and adapters under devframe/adapters/* (cli / build / spa / vite / kit / embedded / mcp). Part of the Vite DevTools monorepo.
pnpm add devframe
See the DevFrame documentation for the full guide and API reference.
⚠️ Experimental. The agent-native surface — the
agentfield ondefineRpcFunction,DevToolsAgentHost, and thedevframe/adapters/mcpadapter — is experimental and may change without a major version bump until it stabilizes.
DevFrame can expose a devtool's RPC functions, tools, and resources to coding agents over MCP. Flag an RPC function with agent: { description } to surface it, then spin up an MCP server:
import { defineDevtool, defineRpcFunction } from 'devframe'
import { createMcpServer } from 'devframe/adapters/mcp'
const getSummary = defineRpcFunction({
name: 'my-plugin:get-summary',
type: 'query',
agent: {
description: 'Return a short summary of the current build state.',
},
setup: ctx => ({ handler: async () => buildSummary() }),
})
const devtool = defineDevtool({
id: 'my-plugin',
setup(ctx) {
ctx.rpc.register(getSummary)
// Optional: register tools or resources directly.
ctx.agent.registerResource({
id: 'latest-build',
name: 'Latest build',
read: () => ({ text: renderMarkdown(latestBuild) }),
})
},
})
await createMcpServer(devtool, { transport: 'stdio' })
Or via the CLI:
devframe mcp
@modelcontextprotocol/sdk is a peer dependency — add it to your package when you want to ship MCP support.
See the Agent-Native guide for the full API, safety model, and Claude Desktop integration example.
FAQs
Framework for building one portable devtool integration that runs in any viewer.
The npm package devframe receives a total of 736,751 weekly downloads. As such, devframe popularity was classified as popular.
We found that devframe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.