
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@codragraph/claude-plugin
Advanced tools
Claude Code plugin — graph-aware tool gating + skill packs powered by CodraGraph (impact analysis, blame-aware retrieval, refactor planning).
Claude Code plugin that gives Claude graph-aware context for every edit. Before each Grep / Glob / Bash invocation, the CodraGraph hook surfaces the blast-radius, callers, and process participation for symbols Claude is about to touch. Claude can also load FeatureCluster packs for product areas like Settings, Auth, AI, or Billing, so it does not have to grep blindly.
# Install the codragraph CLI first
npm install -g @codragraph/cli
# or: bun add -g @codragraph/cli --trust
codragraph setup
# Then add the plugin to Claude Code
claude plugins install integrations/claude
analyze in the
background.feature_clusters and feature_context expose
focused files, line ranges, dependencies, and flows for one product area.codragraph-impact-analysis — what breaks if I change this?codragraph-pr-review — review a diff with full graph contextcodragraph-refactoring — coordinated multi-file editscodragraph-exploring — orient in a new codebasecodragraph-debugging — trace a bug back to its rootcodragraph-guide — generate ARCHITECTURE.md from the graphcodragraph-cli — invoke any codragraph CLI command from chatAPI keys live in ~/.codragraph/config.json — the same file the CLI
uses. Set them with:
codragraph config set claude --api-key sk-ant-...
codragraph config set openai --api-key sk-...
Apache-2.0. You can use, modify, redistribute, bundle, and host this integration commercially, subject to the Apache-2.0 notice and attribution requirements.
FAQs
Claude Code plugin — graph-aware tool gating + skill packs powered by CodraGraph (impact analysis, blame-aware retrieval, refactor planning).
The npm package @codragraph/claude-plugin receives a total of 0 weekly downloads. As such, @codragraph/claude-plugin popularity was classified as not popular.
We found that @codragraph/claude-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.