
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@codervisor/devlog-core
Advanced tools
Core functionality for the devlog system. This package provides the main DevlogManager
class that handles creation,
updating, querying, and management of development logs.
Devlog entries use a well-defined status system to track work progression:
Open Statuses (Active Work):
new
- Work ready to startin-progress
- Actively being developedblocked
- Temporarily stopped due to dependenciesin-review
- Awaiting review/approvaltesting
- Being validated through testingClosed Statuses (Completed Work):
done
- Successfully completedcancelled
- Abandoned/deprioritizedTypical Workflow: new
→ in-progress
→ in-review
→ testing
→ done
📖 View Complete Status Workflow Guide
pnpm add @codervisor/devlog-core
import { DevlogManager } from '@codervisor/devlog-core';
// Initialize the manager
const devlog = new DevlogManager({
workspaceRoot: '/path/to/your/project',
// devlogDir: '/custom/path/.devlog' // optional custom directory
});
// Create a new devlog entry
const entry = await devlog.createDevlog({
title: 'Implement user authentication',
type: 'feature',
description: 'Add JWT-based authentication system',
priority: 'high',
businessContext: 'Users need secure login to access protected features',
technicalContext: 'Using JWT tokens with refresh mechanism',
acceptanceCriteria: [
'Users can register with email/password',
'Users can login and receive JWT token',
'Protected routes require valid token',
],
});
// Update the devlog
await devlog.updateDevlog({
id: entry.id,
status: 'in-progress',
progress: 'Completed user registration endpoint',
});
// Add a note
await devlog.addNote(entry.id, {
category: 'progress',
content: 'Fixed validation issues with email format',
});
// List all devlogs
const allDevlogs = await devlog.listDevlogs();
// Filter devlogs
const inProgressTasks = await devlog.listDevlogs({
status: ['in-progress'],
type: ['feature', 'bugfix'],
});
// Search devlogs
const authDevlogs = await devlog.searchDevlogs('authentication');
// Get active context for AI assistants
const activeContext = await devlog.getActiveContext(5);
// Complete a devlog
await devlog.completeDevlog(entry.id, 'Authentication system implemented and tested');
new DevlogManager(options?: DevlogManagerOptions)
Options:
workspaceRoot?: string
- Root directory of your project (defaults to process.cwd()
)devlogDir?: string
- Custom directory for devlog storage (defaults to {workspaceRoot}/.devlog
)createDevlog(request: CreateDevlogRequest): Promise<DevlogEntry>
updateDevlog(request: UpdateDevlogRequest): Promise<DevlogEntry>
getDevlog(id: string): Promise<DevlogEntry | null>
listDevlogs(filters?: DevlogFilter): Promise<DevlogEntry[]>
searchDevlogs(query: string): Promise<DevlogEntry[]>
addNote(id: string, note: Omit<DevlogNote, "id" | "timestamp">): Promise<DevlogEntry>
completeDevlog(id: string, summary?: string): Promise<DevlogEntry>
deleteDevlog(id: string): Promise<void>
getActiveContext(limit?: number): Promise<DevlogEntry[]>
updateAIContext(args: AIContextUpdate): Promise<DevlogEntry>
addDecision(args: DecisionArgs): Promise<DevlogEntry>
getStats(): Promise<DevlogStats>
The core package supports multiple storage backends:
Storage is configured through the DevlogManager
constructor or environment variables.
This core package is designed to be used by:
@codervisor/devlog-mcp
- MCP server for AI assistants@codervisor/devlog-cli
- Command-line interface@codervisor/devlog-web
- Web interface for browsing devlogsApache 2.0
FAQs
Core devlog management functionality
The npm package @codervisor/devlog-core receives a total of 9 weekly downloads. As such, @codervisor/devlog-core popularity was classified as not popular.
We found that @codervisor/devlog-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.