
Security News
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.
Write Markdown and get a GraphQL API for querying them for free
$ npm install --global lanterns
Create a folder for storing your Markdown files and name it documents:
mkdir documents
Create a file and name it according to [year]-[month]-[day]-[slug] format, then write the contents:
---
title: Hello World
category: News
---
This is my first post!
Run Lanterns:
$ lanterns
❯ Server is listening at port 3000
Execute GraphQL queries at http://localhost:3000/graphql:
{
query {
documents {
title
slug
category
body
}
}
}
Document represents a single Markdown file in the file system.
type Document {
# Title extracted from frontmatter's `title`
title: String!
# Title converted to a slug
slug: String!
# Category extracted from frontmatter's `category`
category: String
# All frontmatter fields
frontmatter: JSON!
# Document body without frontmatter
body: String!
# Date when a document was created
createdAt: Date!
# Date when a document was last updated
updatedAt: Date!
}
Query documents with optional pagination parameters skip and limit.
Example:
{
query {
documents {
title
slug
category
frontmatter
body
createdAt
updatedAt
}
}
}
Query a single document by its slug.
Example:
{
query {
document(slug: "hello-world") {
title
slug
category
frontmatter
body
createdAt
updatedAt
}
}
}
Query all categories. This resolver scans all documents looking for category field
in frontmatter, removes duplicates and returns the list.
MIT © Vadim Demedes
FAQs
Write Markdown and get a GraphQL API for querying them for free
We found that lanterns demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

Research
/Security News
Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.

Security News
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.