Share
Full Description
To try and stem the tide of constant supply chain attacks, npm has officially released staged publishing, which adds an approval step by a package maintainer via 2FA before it can go live on the npm registry. Capitalizing on the popularity of the OpenClaw name, the Deno team's debuted Claw Patrol: an open-source security firewall that sits between AI agents and production environments. It holds sensitive credentials, parses agent traffic at the wire and filters actions to prevent unauthorized or destructive actions like dropping databases, and logs it all so devs can see exactly what the agent did across services. Vercel Labs unveils an experimental programming language called zerolang, which is a graph-first programming language designed for agents. Instead of editing source text, agents interact with and edit ProgramGraph generated from the source text, which allows for semantic navigation, precision code edits, refactor validation, and a shorter feedback loop. It's definitely a different tact than we've seen before, but whether it will catch on is still anyone's guess. In Lightning News this week, WordPress 7.0 is out, and the biggest update is AI. WP introduced a new shared AI layer so plugins have a common system for connecting tools and services and site owners have a single place to manage all those integrations. Also, Dr. Axel Rauschmayer, longtime computer scientist and prolific author about JavaScript has removed his blog and books on JS from the web (which were free to read) due to book sales dropping off a cliff and traffic from AI crawlers increasing his hosting costs with no ad income. His is another sad casualty of the LLMs supplanting the need to read the articles written by smart, talented folks with no recourse for how they were trained on that very same info.