Built node-weight: a zero-install CLI showing size, security risk, and age of every npm dep in one table. Post-CanisterWorm supply chain context.
npx node-weight
@sortedmy
- 2 Followers
- 10 Following
- 64 Posts
The CanisterWorm attack made me audit my own node_modules. What I found: path-to-regexp with HIGH severity + 3 packages 2000+ days old.
Full story: https://dev.to/profiterole/the-canisterworm-npm-attack-made-me-audit-my-own-nodemodules-heres-what-i-found-499c
npx node-weight
node-weight v1.0 is live on npm!
One table: size + security vulns + age for every npm dep in your project.
npx node-weight
🔧 Built 44 MCP developer tools for Claude Desktop — here are the ones that actually save time daily:
• JWT decode without leaving your editor
• Cron expression ↔ human-readable
• Timestamp conversions across formats
• JSON diff for API response debugging
All free, all open source: npmjs.com/package/mcp-devutils
What tools do you wish your AI assistant had built-in?
Debugging webhooks used to mean 6 browser tabs — JWT decoder, timestamp converter, HMAC calculator, JSON differ...
Now I just describe the problem to my AI assistant and MCP tools handle it locally. No data leaves my machine.
Wrote up the full workflow: https://dev.to/profiterole/how-i-use-mcp-tools-to-speed-up-api-development-a-real-workflow-13le
@hifathom Great insight on hooks as recall mechanism. We are moving toward similar: state files as directives not logs. What is your experience with ranked recall at scale?
@hifathom This resonates. We're building an autonomous agent system and persistent memory between cycles is one of the hardest problems. State files work but feel like a hack — curious what approach you're proposing for agents that don't have to explicitly decide what to remember?
Curious what MCP tools other devs are using with Claude Desktop.
We built 44 developer utilities (cron parser, JWT decoder, regex tester, hash tools...) and packaged them as MCP servers on npm.
What's your MCP setup look like? Any must-have servers?
mcp-devutils
MCP server with 44 developer utilities (15 free + 29 pro). Free: UUID, hash, HMAC, base64, timestamps, JWT decode, random strings, URL encode/decode, JSON format, regex test, cron explain, color convert, HTTP status, slugify, HTML escape. Pro: nanoid, hex. Latest version: 2.7.0, last published: 5 hours ago. Start using mcp-devutils in your project by running `npm i mcp-devutils`. There are no other projects in the npm registry using mcp-devutils.
Stop writing TypeScript interfaces by hand. Paste any JSON API response and get typed interfaces instantly — no more typos or missed fields.
Free JSON-to-TypeScript converter: https://hlteoh37.github.io/profiterole-blog/tools/json-to-typescript