
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Standalone command-line tool to fetch RSS/Atom feeds and output structured YAML.
Global (permanent, available everywhere):
npm install -g rss2yaml
Run without installing (via npx):
npx -y rss2yaml --urls "https://techcrunch.com/feed/"
From source (clone the repo):
git clone https://github.com/YOUR_USER/rss2yaml.git
cd rss2yaml
npm install
node rss2yaml.js --urls "https://hnrss.org/frontpage" --limit 5
npx -y rss2yaml --urls "https://techcrunch.com/feed/"
rss2yaml --urls "https://techcrunch.com/feed/" --fields title,description,url,date --limit 10 --sort newest
Fetch Reddit AI news, save to file:
rss2yaml --urls "https://www.reddit.com/search.rss?q=ai+models+news&sort=hot" --fields title,description,url,date --limit 10 --sort newest --out feed-news.yaml
Multiple feeds, filter by keyword:
rss2yaml --urls "https://techcrunch.com/feed/,https://hnrss.org/frontpage" --fields title,url,date --limit 5 --sort newest --filter "openai"
Print to stdout (pipe to another tool):
rss2yaml --urls "https://hnrss.org/frontpage" --fields title,url --limit 20 --no-dedupe
Google News RSS feeds return redirect URLs instead of the real article links. rss2yaml automatically decodes them to the original website URL using google-news-url-decoder.
rss2yaml --urls "https://news.google.com/rss/search?q=openai" --fields title,url,date --limit 5
Output will contain the real article URLs (e.g. https://techcrunch.com/...) instead of https://news.google.com/rss/articles/... redirects.
The --filter flag does a simple substring match (case-insensitive). For short keywords like "AI", add spaces around it to avoid matching words like "email", "daily", "train", etc.:
# Bad — matches "email", "daily", "omain", etc.
rss2yaml --urls "https://hnrss.org/frontpage" --filter "ai"
# Good — matches only " AI " as a standalone word
rss2yaml --urls "https://hnrss.org/frontpage" --filter " AI "
| Flag | Description | Default |
|---|---|---|
--urls, --url | Comma-separated feed URLs (required) | — |
--fields | Fields to extract: title, description, url, date, author | title,description,url,date |
--limit | Max items per feed | 10 |
--sort | Sort order: newest, oldest, none | newest |
--dedupe | Dedup strategy: url, title, url_or_title, none | url_or_title |
--no-dedupe | Disable deduplication | — |
--filter | Keep only items matching this keyword | — |
--keep-html | Keep HTML in text fields (default: HTML is stripped) | — |
--json | Output JSON instead of YAML | false |
--cache <sec> | Cache TTL in seconds | 300 (5 min) |
--no-cache | Skip cache, force fresh fetch | — |
--out | Write output to file (omit to print to stdout) | — |
--help | Show help message | — |
total_items: 5
items:
- source_feed: TechCrunch
title: Some Article
description: Brief summary here
url: https://example.com/article
date: '2025-07-30T12:00:00.000Z'
node (v18+) or bun.google-news-url-decoder).--keep-html to preserve them..rss-cache/) for 5 minutes by default. Use --no-cache to force a fresh fetch, or --cache 600 to change the TTL.FAQs
Standalone CLI tool to fetch RSS feeds and output YAML
The npm package rss2yaml receives a total of 3 weekly downloads. As such, rss2yaml popularity was classified as not popular.
We found that rss2yaml demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.