
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
devpin helps agents reuse an existing managed dev server instead of starting duplicate servers across sessions.
pnpm add -D devpin
Start by asking devpin how this repo should be handled:
devpin guide
Common flow:
devpin status
devpin run --wait
devpin url
devpin logs --tail 100
devpin stop
If the project has no configured dev command:
devpin run --wait -- pnpm run dev
{
"devpin": {
"command": ["pnpm", "run", "dev"],
"env": {
"APP_PORT": "{port}"
},
"publicUrl": "https://web.localhost"
}
}
publicUrl is optional. Without it, devpin url returns the local managed URL.
env is optional. Values are passed to the managed command and can use {port}, {host}, {url}, and {root}.
For Portless, mirror devpin's chosen port into PORTLESS_APP_PORT:
{
"devpin": {
"command": ["vp", "exec", "portless"],
"env": {
"PORTLESS_APP_PORT": "{port}"
},
"publicUrl": "https://web.localhost"
}
}
FAQs
One dev server for every agent.
We found that devpin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.