
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
mdbase-tasknotes
Advanced tools
Standalone CLI for managing markdown tasks via mdbase. Create, query, and manage tasks directly on markdown files using natural language.
Works on the same vault and _types/task.md schema that the TaskNotes Obsidian plugin generates, or can initialize its own standalone collection.
npm install -g mdbase-tasknotes
# Initialize a new collection
mtn init ~/notes
# Set as default collection
mtn config --set collectionPath=~/notes
# Create tasks with natural language
mtn create "Buy groceries tomorrow #shopping @errands"
mtn create "Write report due friday #work +quarterly-review"
mtn create "Fix the faucet high priority #home @house"
# List and query
mtn list
mtn list --overdue
mtn list --tag work --status open
mtn list --json
# Complete a task
mtn complete "Buy groceries"
# Track time
mtn timer start "Write report"
mtn timer status
mtn timer stop
mtn timer log --period today
| Command | Description |
|---|---|
mtn init [path] | Initialize a new collection with mdbase.yaml and _types/task.md |
mtn create <text...> | Create a task from natural language |
mtn list | List tasks with filters (--status, --priority, --tag, --due, --overdue, --where, --on, --json) |
mtn show <task> | Show full task detail (--on YYYY-MM-DD for recurring instance state) |
mtn complete <task> | Mark a task as done (--date YYYY-MM-DD for recurring instance completion) |
mtn update <task> | Update fields (--status, --priority, --due, --title, --add-tag, --remove-tag) |
mtn delete <task> | Delete a task (--force to skip backlink check) |
mtn archive <task> | Add archive tag to a task |
mtn skip <task> | Skip a recurring instance (--date YYYY-MM-DD, default today) |
mtn unskip <task> | Unskip a recurring instance (--date YYYY-MM-DD, default today) |
mtn search <query> | Full-text search across tasks |
mtn timer start|stop|status|log | Time tracking |
mtn projects [list|show] | List projects and their tasks |
mtn stats | Aggregate statistics |
mtn interactive | REPL with live NLP preview |
mtn config | Manage CLI configuration (--set, --get, --list) |
Tasks can be referenced by file path or title. Titles are matched exactly first, then by substring.
Task text is parsed using tasknotes-nlp-core. Supported patterns:
tomorrow, friday, next week, 2026-03-15#shopping, #work@home, @office+quarterly-reviewhigh priority, urgentevery day, weekly, every monday~30m, ~2hThe parser reads status and priority values from your collection's _types/task.md, so customizing the type definition changes what the parser accepts.
For completion semantics, mtn also reads optional tn_completed_values on the status field (for example tn_completed_values: [done, cancelled]).
Resolved in order:
--path / -p flagMDBASE_TASKNOTES_PATH environment variablecollectionPath in ~/.config/mdbase-tasknotes/config.jsonIf you use the TaskNotes Obsidian plugin with mdbase spec generation enabled, mtn works directly on your vault — point it at your vault root and it will read the same mdbase.yaml and _types/task.md the plugin generates. Tasks created by either tool are visible to both.
MIT
FAQs
Standalone CLI for managing markdown tasks via mdbase
The npm package mdbase-tasknotes receives a total of 11 weekly downloads. As such, mdbase-tasknotes popularity was classified as not popular.
We found that mdbase-tasknotes demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.