
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@gensx/windsurf-rules
Advanced tools
This package installs a .windsurfrules
file to your project, providing project-specific instructions for Windsurf's Cascade AI when working with GenSX projects.
Windsurf's .windsurfrules
file provides project-specific instructions that are automatically applied to Cascade AI in your workspace, ensuring it has proper context for working with GenSX projects.
You can install the Windsurf rules directly from npm without adding the package as a dependency:
# Run directly with npx to install the rules
npx @gensx/windsurf-rules
Alternatively, you can install it as a dependency:
npm install --save-dev @gensx/windsurf-rules
# or
yarn add -D @gensx/windsurf-rules
# or
pnpm add -D @gensx/windsurf-rules
Then run the CLI:
npx gensx-windsurf-rules
.windsurfrules
file to your project rootThe included .windsurfrules
file contains:
The .windsurfrules
file uses managed sections delimited by HTML comments:
<!-- BEGIN_MANAGED_SECTION -->
... managed content that will be updated ...
<!-- END_MANAGED_SECTION -->
When upgrading or reinstalling the rules, only the content within these markers will be updated, preserving any custom content you've added outside of the managed section.
Add your custom project information outside the managed section to preserve it during updates.
A section at the bottom of the file is provided specifically for your custom content.
As mentioned in the Windsurf documentation, you may want to add .windsurfrules
to your project's .gitignore
to ensure that the rules are only applied to your local project.
Apache-2.0
FAQs
Windsurf rules for GenSX projects
We found that @gensx/windsurf-rules demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.