
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
flowfactory
Advanced tools
Scaffold the FlowFactory workflow system into any project.
npx flowfactory init
Or install globally:
npm install -g flowfactory
flowfactory init
FlowFactory adds a .factory/ directory with:
/flow:plan, /flow:work, /flow:impl-review, /flow:resume, /flow:check, /flow:statusFlowFactory never overwrites existing files. If .factory/ already exists, only new files will be added. Existing files are always preserved.
After installation:
# Plan a feature
/flow:plan Add user authentication
# Execute a plan
/flow:work plans/add-user-auth.md
# Review your implementation
/flow:impl-review
flowfactory init [options]
Options:
--path <dir> Target directory (default: current directory)
--force Skip confirmation prompts
--help Show help
--version Show version
MIT
FlowFactory is built upon the excellent foundation of Flow by Gordon Mickel, originally created as a Claude Code plugin.
This project adapts and extends that work for the Factory.ai Droid ecosystem, bringing the same disciplined workflow approach to a broader range of AI coding assistants.
We gratefully acknowledge Gordon's forward work in creating structured workflows for AI agents.
FAQs
Scaffold FlowFactory workflow system into your project
We found that flowfactory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.