#share https://lucumr.pocoo.org/2025/8/18/code-mcps/
Armin 认为与其在MCP中暴露许多不同的tool(API)，不如暴露单个编程语言的界面，让MCP成为执行代码的工具，反正LLM也很擅长生成代码。
我有些疑惑，如果是这样，MCP不就仅仅是一个预装SDK的编程环境，那还要MCP做什么？让LLM自己决定添加任意SDK就好了
Armin 认为与其在MCP中暴露许多不同的tool(API)，不如暴露单个编程语言的界面，让MCP成为执行代码的工具，反正LLM也很擅长生成代码。
我有些疑惑，如果是这样，MCP不就仅仅是一个预装SDK的编程环境，那还要MCP做什么？让LLM自己决定添加任意SDK就好了
Armin Ronacher's Thoughts and Writings
Your MCP Doesn’t Need 30 Tools: It Needs Code
Exploration into providing MCPs with the most powerful of all tools: code.
Forwarded from bupt.moe
#security
NPM
更新：
多个npm包的作者 Qix- 被钓鱼，npm账号失陷。黑客上传了多个有恶意代码的npm包。具体包列表可以在以下链接查看：https://github.com/debug-js/debug/issues/1005#issuecomment-3266868187
编者注：考虑到黑客动手的速度之快，可以认为是一次定向的钓鱼攻击。热门包的维护者应该考虑从TOTP转到FIDO2。
NPM
debug 包出现大新闻，任何安装/运行了这个包的电脑均应视为已失陷。更新：
多个npm包的作者 Qix- 被钓鱼，npm账号失陷。黑客上传了多个有恶意代码的npm包。具体包列表可以在以下链接查看：https://github.com/debug-js/debug/issues/1005#issuecomment-3266868187
编者注：考虑到黑客动手的速度之快，可以认为是一次定向的钓鱼攻击。热门包的维护者应该考虑从TOTP转到FIDO2。
Golang 害人不浅😂🤣
https://github.com/bentoml/BentoML/pull/5475/files
https://github.com/bentoml/BentoML/pull/5475/files
GitHub
feat: add bentoml deployment start command by jianshen92 · Pull Request #5475 · bentoml/BentoML
What does this PR address?
bentoml deployment start <deployment_name> to mirror the Start button in BentoCloud.
Syntatic sugar for bentoml deployment update <deployment_name&am...
bentoml deployment start <deployment_name> to mirror the Start button in BentoCloud.
Syntatic sugar for bentoml deployment update <deployment_name&am...
😁6
Forwarded from yihong0618 和朋友们的频道 (伊)
Tall, Snarky Canadian
Why it took 4 years to get a lock files specification
(This is the blog post version of my keynote from EuroPython 2025 in Prague, Czechia.)
We now have a lock file format specification. That might not sound like a big deal, but for me it took 4 years of active work to get us that specification. Part education…
We now have a lock file format specification. That might not sound like a big deal, but for me it took 4 years of active work to get us that specification. Part education…