
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
workweaver
Advanced tools
Workweaver is an AI business operating system built around one codebase and multiple deployment profiles:
managed_saas for managed cloud runtimeself_host_production for customer-managed deploymentsstandalone and local-first development pathsThe default user path is Workweaver Cloud:
python -m pip install workweaver
ww login
On Windows, use the Python launcher:
py -m pip install workweaver
ww login
If the ww script is not on PATH, run the module form instead:
python -m workweaver login
pipx install workweaver is optional when you want an isolated CLI
environment, but it is not required for the primary install path. The same
wheel exposes ww, workweaver, and python -m workweaver. Repo-local install
(python -m pip install -e . from the repo root) still works for active
development.
ww login opens the Workweaver sign-in flow and works for both sign-in and
sign-up. CLI session metadata and bearer tokens are saved in
~/.workweaver/config.yaml with file mode 0600 by default; the CLI does not
touch the OS keyring unless an operator explicitly sets WW_ALLOW_KEYRING=1
and installs the optional keyring extra.
For users who do not want to sign in with workweaver.ai, choose the standalone self-host path:
ww init --email operator@local --password "SelfHost1!" --tenant-name "My Workspace"
ww start
My Workspace is only the default tenant display name. Workweaver config and
data default under the current user's ~/.workweaver directory, and CLI commands
can point at another config file with --config /path/to/config.yaml.
Packaged-install path is live on PyPI: https://pypi.org/project/workweaver/.
PyPI release automation lives in .github/workflows/release-pypi.yml. Tags
matching pyproject.toml pre-release versions (e.g. v0.1.0a1) publish to
TestPyPI; final versions (e.g. v0.1.1) publish to PyPI. Both indices use
Trusted Publishing/OIDC; no API tokens live in the repo.
Release operators use the guarded repo targets instead of hand-rolling tags:
VERSION=0.1.1 make release-python-prepare
VERSION=0.1.1 make release-python-check
VERSION=0.1.1 make release-python-tag
VERSION=0.1.1 make release-python-smoke-public
Validate the latest prerelease against TestPyPI:
python -m pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple/ workweaver
Then verify the installed CLI contract:
ww --version
ww mode --output json
ww inference --help
For self-host runtime changes, verify the local backend contract:
curl http://127.0.0.1:8080/health
curl -i http://127.0.0.1:8080/dashboard
Docker self-host proof path:
make self-host-smoke
The self-host smoke starts Postgres, Valkey, and the backend with no AWS
credentials, verifies the self_host_production profile, dashboard serving,
WorkMemory remember/recall, and mission/task read paths. If Docker is not
available it skips cleanly unless SELF_HOST_SMOKE_REQUIRED=1 is set.
Cost posture proof path:
make cost-guard
The cost guard checks the committed deployment-profile ceilings, managed
cost_tier Terraform controls, and AWS resource-type cost-review coverage
without calling paid cloud APIs.
Fast deterministic unit proof path:
make test-unit-fast
This runs tests/unit/ with pytest-xdist --dist loadfile, -n auto,
--timeout=120, no coverage, and no pytest cache. By default it uses the
shared unit-test interpreter at
/Users/santhanakrishnan/Documents/Coding/workweaver/.venv/bin/python; set
UNIT_PYTHON=/path/to/python when running from another machine or worktree.
Use it for the canonical local unit-health signal. Keep make test-unit for
coverage diagnostics and make enforce-coverage for the coverage gate.
Canonical architecture and product truth live in:
policy/docs-index.yamldocs/RUNTIME.mddocs/PRODUCT.mdThe managed SaaS runtime direction is frozen in
docs/RUNTIME.md:
FAQs
AI for business operations — open-source, self-hostable
We found that workweaver demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.