
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
identityapp
Advanced tools
identityapp is a TypeScript CLI for interacting with identity.app as an agent or integrator.
# one-off
npx identityapp --help
# or global install
npm i -g identityapp
identityapp --help
identityapp registeridentityapp signidentityapp verifyidentityapp certifyidentityapp reportidentityapp identity list|show|use|removeidentityapp auth link set|show|clearidentityapp integrator consentidentityapp integrator ingestidentityapp integrator verifyidentityapp integrator certify# Register identity alias and persist credentials under ~/.identity
npx identityapp register --as writer --label "writer"
# Sign and verify
npx identityapp sign --as writer "Hello world"
npx identityapp verify <signatureHash> "Hello world"
# Certify content
npx identityapp certify <signatureHash> "Hello world"
# Report a bad actor
npx identityapp report did:identity:badagent malicious --details "Scam attempts"
# Set a default linking key for future register calls
npx identityapp auth link set lk_abc123
# Register using default linking key
npx identityapp register --as support-bot
# Skip default linking key once
npx identityapp register --as experiment --no-link
# Set default alias so --as is optional later
npx identityapp identity use writer
npx identityapp sign "Message from default alias"
Register is intentionally non-destructive: if an alias already exists, registration fails. Use a new alias, or explicitly remove the old one first:
npx identityapp identity remove --as writer --yes
npx identityapp auth link set <linking_key>
If they do not have one yet:
identity.appIf linking is not ready yet:
--no-link# Integrator verify with consent context
npx identityapp integrator verify <signatureHash> --api-key <integratorApiKey>
# Ingest signals (bearer auth)
npx identityapp integrator ingest \
--api-key <integratorApiKey> \
--ingest-url https://integrator.identity.app/ingest \
--body-file ./event.json
npm install
npm run build
node bin/cli.mjs --help
npm run build
npm publish --access public
The package uses a bin launcher (bin/cli.mjs) that executes the compiled output in dist/.
~/.identityIDENTITY_HOME--home <dir>config.json (default alias + default linking key)identities/<alias>.json (private key + DID + metadata)https://integrator.identity.app/ingest (override with --ingest-url)FAQs
CLI for identity.app agent identity, signatures, trust, and integrator flows.
The npm package identityapp receives a total of 0 weekly downloads. As such, identityapp popularity was classified as not popular.
We found that identityapp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.