
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
Utoo is a modern, high-performance frontend toolchain designed to provide a unified and optimized experience. It combines a fast package manager, a powerful bundler, and a flexible command system into a single, cohesive ecosystem.
| Feature | Description |
|---|---|
| Unified | One tool for package management, building, and workflow automation. |
| Performance | Core logic in Rust + Turbopack for extreme speed. |
| Compatible | Seamless migration with Webpack compatibility mode. |
| Universal | Run anywhere: Local, CI, or Browser (via WASM). |
utoo (alias ut): High-performance Rust package manager (Fast, Parallel, npm compatible).@utoo/pack: Next-gen bundler powered by Turbopack (HMR, TS/JSX, Less/Sass, and more).@utoo/pack-cli: Command-line interface for the bundler (dev server, build). A lightweight wrapper to run up commands — up is a shortcut alias for utoopack.@utoo/web: Web-compatible version of the toolchain (WASM, Browser-based bundling).# Install the core toolchain (pick one)
brew install utooland/tap/utoo # macOS / Linux via Homebrew
npm install -g utoo # cross-platform via npm
cargo install utoo-pm # build from source via Cargo
# Install the bundler in nodejs environment
ut install @utoo/pack --save-dev
# Install the bundler cli in nodejs environment(Optional)
ut install @utoo/pack-cli --save-dev
# Install the web version
ut install @utoo/web --save
ut install # Install dependencies (or use `ut install`)
ut add lodash # Add a package (or use `ut add`)
ut x create-react # Execute a package (npx style, or use `ut x`)
utx up dev # Start dev server with HMR
utx up build # Production build
utx up build --webpack # Build using webpack.config.js
We love contributions! Check out CONTRIBUTING.md to get started.
Utoo is licensed under the MIT License.
FAQs
Utoo CLI tool
The npm package utoo receives a total of 3,643 weekly downloads. As such, utoo popularity was classified as popular.
We found that utoo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.