
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@nanocollective/nanotune
Advanced tools
A simple, interactive CLI for fine-tuning small language models on Apple Silicon. No YAML configs, no complex flags - just an interactive CLI that guides you through the process. ⚒️
A simple, interactive CLI for fine-tuning small language models on Apple Silicon — built by the Nano Collective, a community collective building AI tooling not for profit, but for the community. Everything we build is open, transparent, and driven by the people who use it.
No YAML configs, no complex flags — just an interactive TUI that guides you through each step. Nanotune handles the MLX and llama.cpp tooling for you automatically.

npm install -g @nanocollective/nanotune
nanotune init
nanotune data add
nanotune train
nanotune export
nanotune chat # talk to your fine-tuned model
nanotune benchmark
Or run directly with npx:
npx @nanocollective/nanotune init
Full documentation is available online at docs.nanocollective.org or in the docs/ folder:
The Nano Collective is a community collective building AI tooling for the community, not for profit. We'd love your help.
FAQs
A simple, interactive CLI for fine-tuning small language models on Apple Silicon. No YAML configs, no complex flags - just an interactive CLI that guides you through the process. ⚒️
We found that @nanocollective/nanotune demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.