
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@mesadev/agentblame
Advanced tools
Know what the AI wrote. Focus your code reviews where it matters.
Track AI-generated vs human-written code in your Git history. Works with Cursor, Claude Code, and OpenCode.
# Install Bun if you haven't already
curl -fsSL https://bun.sh/install | bash
Run this once on your machine to create the local database and the ab shorthand:
bunx @mesadev/agentblame@latest setup
After setup, restart your terminal. You can now use
abinstead ofbunx @mesadev/agentblame@latestfor all commands.
In each git repository you want to track:
ab init
This sets up everything automatically:
Important: Restart your editor after running
ab init.
Make AI edits, commit, then view attribution:
ab blame src/auth.ts
Example output:
src/auth.ts
──────────────────────────────────────────────────────────────────────
Prompts:
[P1] Cursor (gpt-5.2-codex)
"Add a new file hello_world.py in python and add two print st..."
Tools: edit: 1
──────────────────────────────────────────────────────────────────────
7bdf773 Murali Varad 2026-02-03 │ P1 │ 1 │ print("Hello, World1")
7bdf773 Murali Varad 2026-02-03 │ P1 │ 2 │ print("Hello, World2")
──────────────────────────────────────────────────────────────────────
████████████████████████████████████████
AI: 2 lines (100%) │ Human: 0 lines (0%)
First run:
bunx @mesadev/agentblame@latest setup— this creates the database and adds theabshell alias. After restarting your terminal, useabfor all commands below.
| Command | Description |
|---|---|
bunx @mesadev/agentblame@latest setup | One-time machine setup (creates database + ab alias) |
ab init | Set up hooks and GitHub Actions workflow for a repo |
ab status | Show tracking stats for current repo |
ab blame <file> | Show AI attribution for a file |
ab sync | Transfer notes after squash/rebase |
ab config | Show/set configuration |
ab debug | Show detailed debug info |
# Show current config
ab config
# Disable prompt content storage (enabled by default)
ab config set storePromptContent false
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ Cursor/Claude │────▶│ Git Hooks │────▶│ Database │
│ Code edits │ │ capture edits │ │ stores pending │
└─────────────────┘ └─────────────────┘ └─────────────────┘
│
▼
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ CLI/Extension │◀────│ Git Notes │◀────│ Git Commit │
│ show markers │ │ store metadata │ │ triggers match │
└─────────────────┘ └─────────────────┘ └─────────────────┘
| Problem | Solution |
|---|---|
| Database not found | Run bunx @mesadev/agentblame@latest setup once on your machine |
| Hooks not capturing | Restart your editor; run ab debug to check status |
| Notes not on GitHub | Run git push origin refs/notes/agentblame |
| Squash merge lost attribution | Ensure workflow is committed; run ab sync locally |
| Bun not found | Install Bun: curl -fsSL https://bun.sh/install | bash |
See AI attribution directly on GitHub PRs:
For full documentation, contributing guidelines, and source code, visit the GitHub repository.
Apache 2.0
FAQs
CLI to track AI-generated vs human-written code
We found that @mesadev/agentblame demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.