
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@e0ipso/self-review
Advanced tools
A local code review tool for developers working with AI coding agents.
When you use tools like Claude Code to generate code changes, you need to review those changes before accepting them. Today your options are: push to GitHub (exposing unfinished work to a remote server) or squint at diffs in the terminal.
self-review gives you GitHub's pull request review UI on your local machine — no remote, no account, no setup. Launch it from the terminal, review the diff, leave comments and suggestions, close the window. Your feedback is written to stdout as structured XML that you pipe directly back to your AI agent.

# Review staged changes, save feedback as XML
self-review --staged > review.xml
# Feed the feedback back to your AI agent
cat review.xml | claude-code "Apply this review feedback"
# Review changes between branches
self-review main..feature-branch > review.xml
# Resume a previous review
self-review --staged --resume-from review.xml > review-updated.xml
bug, nit, security, question, etc.--resume-fromCustomize self-review with YAML configuration files:
~/.config/self-review/config.yaml — personal preferences for all projects.self-review.yaml — per-project settings (committable)Project config overrides user config, which overrides built-in defaults.
# .self-review.yaml
categories:
- name: bug
description: 'Likely defect or incorrect behavior'
color: '#e53e3e'
- name: security
description: 'Potential security vulnerability'
color: '#d69e2e'
- name: nit
description: 'Minor style or formatting suggestion'
color: '#718096'
- name: question
description: 'Clarification needed'
color: '#3182ce'
theme: light, dark, or system (default: system)diff-view: split or unified (default: split)font-size: editor font size in pixels (default: 14)ignore: file patterns to exclude from diff (glob syntax)categories: custom comment tags (see example above)default-diff-args: default arguments passed to git diffshow-untracked: show new files not yet added to git (default: true)word-wrap: wrap long lines in the diff viewer (default: true)See docs/PRD.md for complete documentation.
This project uses GitHub Actions for continuous integration and delivery.
Test gating: Every push to main and every PR runs three parallel jobs — Lint, Unit Tests, and E2E Tests. All three must pass before a PR can be merged (enforced via branch protection required status checks).
Automated releases: When conventional commits are merged to main, semantic-release automatically determines the next version, creates a GitHub Release, and publishes to npm as @e0ipso/self-review.
main > Enable "Require status checks to pass" > Select Lint, Unit Tests, E2E Tests.@e0ipso/self-review, configure Trusted Publishers > GitHub Actions with this repository and the ci.yml workflow.FAQs
Review your changes locally
We found that @e0ipso/self-review demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.