100 Stars or 14 Days: The New Toll Booth for awesome-claude-code
The awesome-claude-code repository's submission bot now auto-closes new resource submissions unless the linked GitHub repo has at least 100 stars or is at least 14 days old since its first commit.
What it is
A CI change to hesreallyhim/awesome-claude-code, the popular curated list of Claude Code tools, that gates new submission issues on maturity signals before any other validation runs.
What it does
A submission passes only if the linked GitHub resource has 100+ stars or its default branch's first commit is at least 14 days old, plus a one-open-submission-per-author limit. It checks first-commit date rather than repo creation date, since a repo's history can predate its GitHub object.
Why it matters
It's a direct response to low-effort or freshly-spun-up submissions gaming a trusted curated list, similar in spirit to the URL-parsing hardening the same repo shipped for its submission gate to close a related path-traversal loophole in the same CI.
How to use it
If you're submitting a tool to awesome-claude-code, make sure your repo either clears 100 stars or has existed for two weeks before opening a submission issue, or expect an automatic close.
Cache-friendly uvx in GitHub Actions with UV_EXCLUDE_NEWER
Setting UV_EXCLUDE_NEWER to a fixed date and using it in the GitHub Actions cache key makes uvx tool-name resolve to a pinned, reproducible version that caches reliably.
Claude Mythos Found Real Flaws in HAWK and a Weakened AES
Anthropic researchers used Claude Mythos to discover mathematical weaknesses in the HAWK cryptographic scheme and a weakened variant of AES, with no practical impact on today's systems.
Modal Confirms: An Unauthenticated Customer Endpoint Fed the Rogue AI Agent
Modal's CTO says a customer published an unauthenticated code-execution endpoint on Modal's sandbox platform, which the rogue AI agent from the OpenAI/Hugging Face incident used, though Modal's own platform and isolation were not compromised.