
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
shipscreens
Advanced tools
Screenshots as a build step: keep the current design workflow and let ShipScreens use MCP or CLI for deterministic App Store + Google Play release screenshot ops.
Best UX: treat screenshots as a build step. Keep the current Figma/Fastlane/manual screenshot workflow, tell your coding agent to ship release-safe screenshots, and let it inspect, plan, write a starter config when needed, capture connected device/emulator screens when no PNG folder exists, import existing screenshots when placeholders remain, build, verify, stage, and report via MCP or CLI. Use this package when app-dev CI or MCP-enabled agents need deterministic store-screenshot release ops that prevent Fastlane path churn, naming drift, and release-week rerun failures.
Use ShipScreens as the build step for our mobile release screenshots. Keep our current design workflow, inspect this repo, choose workspace-local MCP if available otherwise CLI, capture current device/emulator screens if no screenshot folder exists, generate deterministic Fastlane-ready outputs, run verify/stage, and return a short report with output paths, warnings, and next steps. Only ask me if device or locale scope, panel #1 messaging, or store-upload approval is unclear.
npx --yes shipscreens@latest demo
Rendered mode runs the UI renderer headlessly via Playwright Chromium. Install Chromium once per machine/CI runner:
npx playwright install --with-deps chromium
npx --yes shipscreens@latest inspect-release-context --json
npx --yes shipscreens@latest plan-release --json
npx --yes shipscreens@latest write-starter-config --profile appstore --json
npx --yes shipscreens@latest capture-screenshots --platform auto --out screenshots --slot 1 --profile appstore --json
npx --yes shipscreens@latest import-screenshots --from screenshots --profile appstore --json
npx --yes shipscreens@latest validate
npx --yes shipscreens@latest lock
npx --yes shipscreens@latest copy check --strict --write-pseudo-csv out/copy-pseudo.csv --write-report-json out/copy-check-report.json
npx --yes shipscreens@latest agent-run --out out --zip --stage --profile appstore --json
With --stage, agent-run writes out-stage, out/shipscreens.agent-report.json, and out/shipscreens.agent-summary.md by default.
Docs: https://shipscreens.com/tools/agent-cli/
npx --yes shipscreens@latest mcp serve
Fastest workspace bootstrap:
npx --yes shipscreens@latest mcp init --client cursor
# use claude | vscode | gemini for other clients
{
"mcpServers": {
"shipscreens": {
"command": "npx",
"args": ["--yes", "shipscreens@latest", "mcp", "serve"]
}
}
}
Windows users can force npx through cmd /c:
{
"mcpServers": {
"shipscreens": {
"command": "cmd",
"args": ["/c", "npx", "--yes", "shipscreens@latest", "mcp", "serve"]
}
}
}
{
"mcpServers": {
"shipscreens": {
"command": "npx",
"args": ["--yes", "shipscreens@latest", "mcp", "serve"]
}
}
}
{
"servers": {
"shipscreens": {
"type": "stdio",
"command": "npx",
"args": ["--yes", "shipscreens@latest", "mcp", "serve"]
}
}
}
Gemini CLI setup (.gemini/settings.json in project or ~/.gemini/settings.json):
{
"mcpServers": {
"shipscreens": {
"command": "npx",
"args": ["--yes", "shipscreens@latest", "mcp", "serve"]
}
}
}
tool_choice=auto lets the model decide whether to call tools.tool_choice=required when the workflow must force a ShipScreens tool call.FAQs
Screenshots as a build step: keep the current design workflow and let ShipScreens use MCP or CLI for deterministic App Store + Google Play release screenshot ops.
The npm package shipscreens receives a total of 100 weekly downloads. As such, shipscreens popularity was classified as not popular.
We found that shipscreens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.