Policy dependency / Stack layer
A Bun packaging quirk left a vulnerable undici in Cline after the CVE was supposedly remediated
GitHub
Policy dependency / Stack layer
Claude Code adds omitClaudeMd so subagents can run without inherited CLAUDE.md, and a sha256 plugin-install accept flag
GitHub
Stack layer / Threat pattern
Cline Leaves the IDE: a Standalone Desktop Agent That Imports Claude Code and Codex Sessions and Schedules Recurring PR Reviews
Cline GitHub releases (launch reported by RuntimeWire, version cadence verified on the repo)
Stack layer / Threat pattern
Snyk put its agent-skill scanner behind a free web page called Skill Inspector
Snyk Labs
Stack layer / Threat pattern
A 50-PR code review benchmark puts GPT-5.6 Luna at 28x cheaper than Astra and 74% precision against 96%
Entelligence
Policy dependency / Stack layer
Amazon and Microsoft Are Siding With Ratepayers Against Utilities on Data Center Power Bills
The Information
Stack layer / Contrast
Claude Code lowers the medium dynamic-workflow guideline from 15 agents to 10, and defaults Pro plans to small
Claude Code Changelog
Stack layer / Contrast
Alibaba's open-code-review v1.12.1 adds OpenCode 2.x native-tool support and a git binary safety check
GitHub