
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
pi-collapse-tools
Advanced tools
Pi extension that hides tool output by default (expand with Cmd+O / Ctrl+O).

A pi extension that keeps your chat clean by hiding tool output by default.
pi install npm:pi-collapse-tools
Restart pi (or run /reload).
pi -e npm:pi-collapse-tools
pi install git:github.com/xRyul/pi-collapse-tools
This extension overrides pi’s built-in tools by registering tools with the same names, but only for the tools you enabled via --tools / --no-tools (default: read,bash,edit,write).
It delegates execution to the built-in implementations, but changes rendering so output is collapsed by default.
Examples:
pi → wraps read, bash, edit, writepi --tools read,grep,find,ls → also wraps grep, find, lspi --no-tools → wraps nothing (does not re-enable tools)git clone https://github.com/xRyul/pi-collapse-tools
cd pi-collapse-tools
pi -e ./index.ts
MIT
FAQs
Pi extension that hides tool output by default (expand with Cmd+O / Ctrl+O).
The npm package pi-collapse-tools receives a total of 11 weekly downloads. As such, pi-collapse-tools popularity was classified as not popular.
We found that pi-collapse-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.