
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
Cloud platform SDK for AI coding agents — scaffold, deploy, and operate cloud stacks alongside your AI coding agent.
The runtime CLI for Firth — the cloud platform SDK for AI coding agents.
Status: Pre-alpha. v0.0.1 ships only firth init (project scaffolding).
This repo is the L2 / CLI layer of the Firth project. The companion repo firth holds the L1 / Knowledge layer (Skills, templates, runbooks, ARCHITECTURE.md).
For the project's overall design and rationale, see firth/ARCHITECTURE.md. This README is just for the CLI itself.
# from this directory
npm install
# run the CLI in dev (no build step)
npm run dev -- init
# typecheck
npm run typecheck
# tests
npm test
# build a distributable
npm run build
# link into your shell so `firth` works globally during dev
npm link
firth init my-test-app
firth init [name]Scaffold a Firth project. Generates firth.config.ts and firth.lock.json.
# interactive
firth init my-app
# in current directory
firth init .
# non-interactive (agent-friendly): use defaults
firth init my-app --yes
# non-interactive with explicit overrides
firth init my-app --frontend=nextjs --backend=hono --db=neon \
--frontend-host=vercel --backend-host=railway --yes
Defaults (when --yes is passed): Next.js + Hono + Neon Postgres + Vercel + Railway.
firth deploy — provision resources and push code across the stack.firth secrets set/get/list — sync secrets across providers.firth logs [--service] — tail logs.firth status — current deployment + resource state.firth handoff — generate a context dump for a fresh agent session.firth db migrate / db reset — database lifecycle.ERROR / LIKELY CAUSE / SUGGESTED ACTIONS so an agent loop can recover.firth.config.ts (declarative, hand-edited) + firth.lock.json (generated, holds resource IDs) — both committed.See firth/ARCHITECTURE.md for the full rationale.
MIT (planned).
FAQs
The Firth CLI — provision and govern a project's cloud resources (Neon Postgres, Tigris storage, Fly.io compute) behind one credential seam.
The npm package firth receives a total of 4 weekly downloads. As such, firth popularity was classified as not popular.
We found that firth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.