
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
Local-first CLI for planning, documentation, and execution workflows with agent assistance.
mcoda is a local-first CLI for planning, documentation, and execution workflows with agent assistance.
npm i -g mcodamcoda --versionmcoda set-workspace --workspace-root .
mcoda docs pdr generate --workspace-root . --project WEB --rfp-path docs/rfp/web.md --agent codex
docdex CLI for doc search and context stitching.docdex setup to install Playwright and at least one browser for qa-tasks.~/.docdex; mcoda does not create repo-local .docdex folders.~/.docdex/agents.md exists, it is prepended to every agent run..mcoda/config.json for defaults (docdex URL, branch metadata, telemetry preferences)..mcoda/mcoda.db for backlog, jobs, and telemetry..mcoda/docs/ for generated artifacts.mcoda docs pdr generate, mcoda docs sds generatemcoda openapi-from-docsmcoda create-tasks, mcoda refine-tasks, mcoda order-tasksmcoda work-on-tasks, mcoda code-review, mcoda qa-tasksmcoda backlog, mcoda taskmcoda jobs, mcoda tokens, mcoda telemetrymcoda test-agent, mcoda agent-runmcoda update --checkEnvironment variables are optional overrides for workspace settings:
MCODA_DOCDEX_URL to point at a docdex server.MCODA_API_BASE_URL or MCODA_JOBS_API_URL for job APIs.MCODA_TELEMETRY set to off to disable telemetry.MCODA_STREAM_IO=1 to emit agent I/O lines to stderr.import { McodaEntrypoint } from "mcoda";
await McodaEntrypoint.run(["--version"]);
Full docs live in the repository:
MIT - see LICENSE.
FAQs
Local-first CLI for planning, documentation, and execution workflows with agent assistance.
The npm package mcoda receives a total of 456 weekly downloads. As such, mcoda popularity was classified as not popular.
We found that mcoda demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.