
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@pkgseer/cli
Advanced tools
Retired - use githits instead: https://github.com/githits-com/githits-cli
This package is retired.
0.7.0is the final release and ships no functionality: every command prints a migration notice and exits non-zero. Older0.6.xversions are unsupported and no longer work fully against the backend. Use GitHits instead.
GitHits is the code context layer for AI coding agents. It covers what this CLI did — package metadata, vulnerabilities, dependencies, changelogs, docs, code navigation — and adds cross-OSS example search.
npx -y githits@latest init
The wizard detects your coding agents, signs you in, and writes the MCP and
skill configuration. Uninstall the old CLI and drop any pkgseer entry from
your agents' MCP configuration:
npm uninstall -g @pkgseer/cli
Command names carry over — pkgseer login, pkgseer search, pkgseer pkg …,
pkgseer docs …, and pkgseer code … become githits …. Some surfaces moved
or were renamed; see the GitHits docs for the
current command reference and manual MCP
setup.
1.pkgseer mcp still starts and still advertises the tool
names 0.6.16 exposed, but every tool call returns the migration notice as an
error. This is deliberate: an agent that still has pkgseer configured
reports the migration path instead of a server that failed to start.The backend has moved on. Query surfaces the older versions depend on are being removed — every search surface other than discovery search, for example — so 0.6.x returns errors or partial results, and it will keep degrading. Every published version is deprecated on npm and none will receive fixes.
Note that ^0.6.x ranges do not cross to 0.7.0, so a pinned install never
picks up the migration notice on its own. Upgrade or uninstall.
Archived and read-only. The last functional implementation is on the
v0.6.16 tag
and the source remains in src/ for reference; only the entry point
(src/cli.ts) was replaced. Issues and pull requests belong in
githits-cli.
MIT — see LICENSE. (c) 2025-2026 Juha Litola
FAQs
Retired - use githits instead: https://github.com/githits-com/githits-cli
The npm package @pkgseer/cli receives a total of 107 weekly downloads. As such, @pkgseer/cli popularity was classified as not popular.
We found that @pkgseer/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.