
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
vweatherstation-mcp
Advanced tools
MCP server for VWeatherStation — settlement-grade weather data for prediction markets (Polymarket/Kalshi): general weather plus temperature, rain, wind, snow, hurricanes and forecast confidence, paid per call via x402 (USDC on Base).
MCP server exposing VWeatherStation's paid weather API as tools for AI assistants. Settlement-grade weather data for prediction markets (Polymarket/Kalshi), paid per call via x402 (USDC on Base).
get_weather — general current weather + 7-day forecast for any lat/lon ($0.02)get_temperature — settlement-grade temp at market stations ($0.05)get_all_market_weather — all metrics for a city ($0.08)get_rain / get_wind / get_snow — per-metric ($0.04)get_hurricanes — active tropical cyclones, NHC ($0.05)get_forecast_confidence — multi-model confidence score ($0.01)Set WALLET_PRIVATE_KEY to a funded Base wallet (small USDC). Add to your MCP client config:
{
"mcpServers": {
"vweatherstation": {
"command": "npx",
"args": ["-y", "vweatherstation-mcp"],
"env": { "WALLET_PRIVATE_KEY": "0x..." }
}
}
}
Payments are handled automatically via x402. Each tool call pays the listed price to VWeatherStation's Base wallet.
FAQs
MCP server for VWeatherStation — settlement-grade weather data for prediction markets (Polymarket/Kalshi): general weather plus temperature, rain, wind, snow, hurricanes and forecast confidence, paid per call via x402 (USDC on Base).
We found that vweatherstation-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.