
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
pixelpact-mcp
Advanced tools
MCP server that lets a coding agent measure the UI it just built against the reference
An MCP server that lets a coding agent measure its own UI work against a visual contract,
without a human in the loop. It wraps pixelpact-core.
pnpm add -D pixelpact-mcp
pixelpact-mcp
The binary speaks the Model Context Protocol over stdio. Point an MCP client at it, for
example by adding it to the client's server list with the command pixelpact-mcp.
extract_contract extracts a visual contract from a reference URL and saves it as JSON.check_implementation measures an implementation URL against a saved contract and returns
a formatted deviation table plus numeric totals.diff_pixels compares an implementation URL against the contract's reference screenshot
pixel by pixel.read_contract_summary reads a saved contract and describes it without opening a browser.A typical loop: extract_contract once against the reference design, then
check_implementation after each change, then diff_pixels for a stricter final check.
Node >= 22.12. Playwright browsers must be installed separately, for example
pnpm exec playwright install chromium, since playwright is a peer dependency.
FAQs
MCP server that lets a coding agent measure the UI it just built against the reference
The npm package pixelpact-mcp receives a total of 88 weekly downloads. As such, pixelpact-mcp popularity was classified as not popular.
We found that pixelpact-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.