
Research
/Security News
77 Firefox Extensions Linked to Crypto Wallet and Credential Theft
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.
@constellationdev/cli
Advanced tools
Installation • Quick Start • Commands • Configuration
The Constellation CLI parses your source code locally using Tree-sitter and uploads Abstract Syntax Tree (AST) metadata to the Constellation service. This creates a shared code intelligence graph that powers AI development tools via the Constellation MCP server.
What it does: Keeps a centralized code intelligence graph up-to-date so your team's AI assistants (like Claude) can access instant, consistent codebase understanding without local indexing overhead.
Key benefits:
Currently supports:
Additional languages (C, C++, C#, Go, Java, JSON, PHP, Ruby, Shell) coming soon
.gitignore and Git configurationnpm install -g @constellationdev/cli@latest
constellation init
Creates constellation.json configuration file with interactive prompts:
constellation auth
Stores your Constellation access key in environment variables.
Alternative: Set manually:
export CONSTELLATION_ACCESS_KEY="your-access-key"
# Smart indexing (incremental if possible)
constellation index
# Force complete re-index
constellation index --full
constellation initInitialize project configuration.
constellation init
Creates: constellation.json file in current directory
Requires: Git repository
Interactive: Prompts for project ID, branch, and languages
constellation authConfigure authentication credentials.
constellation auth
Stores: Access key in CONSTELLATION_ACCESS_KEY environment variable
Interactive: Prompts for Constellation access key
constellation indexParse codebase and upload intelligence to Constellation service.
constellation index [options]
Options:
--full: Force complete re-index--incremental: Explicitly request incremental (default when previous index exists)Process:
What gets indexed:
.gitignore)The constellation.json file controls indexing:
{
"projectId": "project-identifier",
"branch": "main",
"languages": {
"typescript": {
"fileExtensions": [".ts", ".tsx"]
},
"javascript": {
"fileExtensions": [".js", ".jsx"]
}
},
"exclude": ["**/node_modules/**", "**/dist/**"]
}
Fields:
projectId (required): Unique project identifier (from your Constellation web dashboard)branch (required): Git branch to tracklanguages (required): Language config with file extensionsexclude (optional): Glob patterns to exclude| Language | Identifier | Default Extensions |
|---|---|---|
| JavaScript | javascript | .js, .jsx, .mjs, .cjs |
| TypeScript | typescript | .ts, .tsx |
Coming Soon: C, C++, C#, Go, Java, JSON, PHP, Python, Ruby, Shell, and more!
CONSTELLATION_ACCESS_KEY: API authentication keyWe strongly recommend setting up Constellation indexing in your CI/CD pipeline. This enables "set it and forget it" automation, whenever code is pushed or merged into your configured branch, the index automatically updates. Your team's AI development tools stay current without any manual intervention or developer overhead.
Benefits of CI/CD Automation:
name: Constellation Auto-Index
on:
push:
branches: [main] # Match your configured branch
pull_request:
branches: [main]
types: [closed]
jobs:
index:
# Only run on merged PRs or direct pushes
if: github.event_name == 'push' || github.event.pull_request.merged == true
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- uses: actions/setup-node@v3
with:
node-version: '24'
- name: Install Constellation CLI
run: npm install -g @constellationdev/cli
- name: Run Incremental Index
run: constellation index --incremental
env:
CONSTELLATION_ACCESS_KEY: ${{ secrets.CONSTELLATION_ACCESS_KEY }}
Setup Steps:
CONSTELLATION_ACCESS_KEY to your CI/CD secrets/environment variablesconstellation index --incrementalIncremental (default when previous index exists):
Full (triggered with --full or no previous index):
| Issue | Solution |
|---|---|
| "Could not find git client" | Install Git from git-scm.com |
| "Not a git repository" | Run from within a Git repository or git init |
| "Branch not configured" | Switch branches or update branch in constellation.json |
| "Outstanding changes detected" | Commit or stash changes: git add . && git commit or git stash |
| "Access key not found" | Run constellation auth or set CONSTELLATION_ACCESS_KEY |
| Parse errors | Some files may have syntax errors; CLI continues processing others |
Get Help:
constellation --helpGNU Affero General Public License v3.0 (AGPL-3.0)
Copyright © 2026 ShiftinBits Inc.
See LICENSE file for details.
FAQs
Codebase Understanding for AI Coding Agents
The npm package @constellationdev/cli receives a total of 81 weekly downloads. As such, @constellationdev/cli popularity was classified as not popular.
We found that @constellationdev/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.

Security News
In his AI Council 2026 talk, Feross Aboukhadijeh covers recent package compromises, vulnerability discovery, and a more automated security model.