
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@tooly/github
Advanced tools
GitHub API tools for OpenAI, Anthropic, and AI SDK.
npm install @tooly/github
import { createAITools } from '@tooly/github'
const tools = createAITools('your-github-token')
// Use with AI SDK
import { generateText } from 'ai'
const result = await generateText({
model: openai('gpt-4.1-nano'),
tools,
prompt: 'Create a new issue in my repo called "Fix bug in login"',
})
import { createOpenAIFunctions } from '@tooly/github'
const { functions, callFunction } = createOpenAIFunctions('your-github-token')
// Use with OpenAI client
const response = await openai.chat.completions.create({
model: 'gpt-4',
messages: [{ role: 'user', content: 'Create an issue in my repository' }],
functions,
})
// Handle function calls
if (response.choices[0].message.function_call) {
const result = await callFunction(response.choices[0].message.function_call)
}
import { GitHubTools } from '@tooly/github'
const github = new GitHubTools('your-github-token')
// Create an issue
const issue = await github.getHandlers().createIssue({
owner: 'username',
repo: 'repository',
title: 'Bug report',
body: 'Description of the bug',
labels: ['bug', 'high-priority'],
})
console.log(`Created issue #${issue.number}`)
createIssue - Create a new issue in a repositorygetIssue - Get details of a specific issueupdateIssue - Update an existing issuesearchIssues - Search for issues using various filtersgetRepository - Get details of a repositorygetUser - Get user details (authenticated user or by username)You need a GitHub personal access token to use this package. You can create one at: https://github.com/settings/tokens
The token needs the following scopes:
repo - Full control of private repositoriespublic_repo - Access public repositoriesuser - Read user profile dataMIT
FAQs
GitHub API tools for OpenAI, Anthropic, and AI SDK
We found that @tooly/github demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.