
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@next-open-ai/workai
Advanced tools
Cross-platform local AI workspace (forked from EasyAI).
Agent engine: default in-process pi; optional AgentScope Sidecar via WebSocket JSON-RPC (WORKAI_AGENT_ENGINE=agentscope).
Quick links:
docs/runtime-modes.mddocs/release-checklist.mddocs/dual-runtime-release-notes.mddeploy/docker/workai/docs/agentscope-migration.mddocs/design/agentscope-abi.mdpnpm install
pnpm dev
pnpm web:build
pnpm web:start
pnpm workai:doctor
pnpm workai:init
pnpm workai:start
pnpm agentscope:smoke
Install from npm:
npm install -g @next-open-ai/workai
workai doctor
workai init
workai start
Data directory: ~/.workai.
FAQs
Cross-platform local AI workspace.
We found that @next-open-ai/workai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.