
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
Set up LopeBase from your project's folder: scan your stack, connect your workspace, and let your coding agent do the rest.
Set up LopeBase from your project's own folder.
Your coding agent does the steps. It stops for you only when it has to.
Website · For agents · Pricing · @lopebase/adapter
LopeBase is one place to see and run all of your products: traffic, search, signups, revenue, and errors side by side, with a weekly summary and an agent that can help. This CLI connects a project to it in a few minutes.
In the folder of any project you run:
npx lopebase
--url https://your-address.No agent installed? It prints the prompt for you to paste instead.
It animates a little in an interactive terminal. --no-motion or
LOPEBASE_NO_MOTION=1 turns that off; CI and pipes never animate.
Made for web products, and fine with anything else:
homepage, wrangler routes, CNAME, a
framework config (site, siteUrl, baseURL), or the canonical tag in
index.html. Your GitHub repo, from the git remote.| Command | What it does |
|---|---|
npx lopebase | Scan, connect, choose, and hand over to your agent. |
npx lopebase login | Connect this computer to your workspace with a short code, creating an account if you need one. --paste to paste an agent token instead. |
npx lopebase update | Update this project's LopeBase Adapter: what is new, then your agent does it. |
npx lopebase scan | Show what the scan found. --json for scripts. |
npx lopebase prompt | Print the setup prompt instead of starting an agent. |
npx lopebase mcp | Run the LopeBase tools as a local MCP server (stdio) for any agent. |
npx lopebase adapter secret | Print a new signing secret for @lopebase/adapter. Pipe it straight into your secret store. |
npx lopebase adapter check <url> | Test a running adapter, local or deployed, before you connect it. |
package.json files (and requirements.txt, pyproject.toml,
Gemfile, composer.json, go.mod, Cargo.toml) at the root, in your
workspace folders, and in apps/, packages/, and similar folders; config
file names such as wrangler.toml or vercel.json; the site address in a
few config files; your git remote's address; and the variable names in
.env.example style files..env file, and never sends a value anywhere. Only
names leave your machine, and only to your own workspace.~/.config/lopebase/auth.json,
readable only by you. It lasts 30 days, acts as the workspace admin who
approved it, is limited to what that admin allowed, and can be revoked any
time under Settings, Agent access.LOPEBASE_TOKEN and LOPEBASE_URL override the saved values, for CI or
another machine.npx lopebase sets this up for you. To add the tools by hand, register this
as a stdio MCP server in your agent:
npx -y lopebase mcp
Or point an agent that supports remote MCP straight at your workspace, for
example https://yourteam.lopebase.com/api/mcp. It will ask you to sign in.
Node 18 or newer. Works on macOS, Linux, and Windows.
Questions or problems: contact@jackalope.digital. Privacy: app.lopebase.com/legal/privacy.
LopeBase is made by Jackalope Digital.
FAQs
Set up LopeBase from your project's folder: scan your stack, connect your workspace, and let your coding agent do the rest.
The npm package lopebase receives a total of 57 weekly downloads. As such, lopebase popularity was classified as not popular.
We found that lopebase demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.