
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
The Mastra CLI lets you initialize a new project, spin up a local dev server, and deploy it to serverless platforms like Vercel and Cloudflare Workers.
npm i -g mastra
# Initialize a new project
mastra init
Mastra's data syncing infrastructure is designed for Next.js sites running on serverless hosting providers like Vercel or Netlify.
Logs are stored in Upstash.
mastra init
is used for initializing a new project.
This creates a mastra directory under src
containing an index.ts
entrypoint and an agent
directory containing two sample agents.
project-root/
├── src/
├── app/
└── mastra/
├── agents/
│ └── agents.ts
└── index.ts
mastra dev
This spins up a local development server that hosts REST
endpoints for all agents and workflows. It also has a chat interface for testing them.
The server is useful for testing and developing agents, workflows, and integrations without needing to deploy your application.
The server is available at http://localhost:3000
.
mastra build
This command builds your Mastra project for deployment to different environments. The build process:
Options:
--dir Directory containing Mastra files (default: src/mastra)
Example usage:
# Build using default directory
mastra build
# Build from custom directory
mastra build --dir path/to/mastra
The build output is determined by your Mastra instance's deployer configuration:
const mastra = new Mastra({
deployer: {
type: 'HONO', // Target environment (HONO, EXPRESS, NEXT)
// Environment-specific options
},
});
mastra deploy
This command deploys the mastra project to a serverless platform like Vercel or Cloudflare Workers.
The deploy command does the following:
This CLI collects anonymous usage data (no personal/sensitive info) to help improve Mastra. This includes:
To opt-out:
NO_MASTRA_TELEMETRY=1
to commandspnpm i
to install depsFAQs
cli for mastra
The npm package mastra receives a total of 2,964 weekly downloads. As such, mastra popularity was classified as popular.
We found that mastra demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.