
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
ghostlight
Advanced tools
Installer and launcher for visible local browser automation in your signed-in Chromium profile, with optional policy and audit.
Delightful, responsible browser automation for AI coding agents. Ghostlight gives any MCP client access to your own authenticated Chromium session, keeps the work visible, and adds inspectable boundaries when you want them. All-open is a first-class default.
This npm package is a thin launcher. On first run it downloads the version-matched Ghostlight
binaries from the GitHub release and caches them under ~/.ghostlight/bin/, so there are no
runtime dependencies. The package keeps the persistent service, the protocol-versioned MCP edge,
and the browser-only native connector together. A bare npx ghostlight starts ghostlight-mcp-connector, the
stdio server your client talks to; npx ghostlight install connects the browser side.
Install the service, browser connection, and detected MCP-client entries in one idempotent step:
npx -y ghostlight install
The command opens the current extension walkthrough on the first run. Until the Chrome Web Store listing is public, the walkthrough provides the manual release-archive path. Restart your MCP clients when both halves are installed. Full walkthrough, client buttons, and manual paths: https://sylin.org/ghostlight/
For a client the installer does not recognize, use Ghostlight as this stdio server:
{ "command": "npx", "args": ["-y", "ghostlight"] }
FAQs
Launcher for visible local browser automation in your signed-in Chromium profile, with optional policy and audit.
The npm package ghostlight receives a total of 497 weekly downloads. As such, ghostlight popularity was classified as not popular.
We found that ghostlight demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.