
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@wipcomputer/wip-license-guard
Advanced tools
License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.
Enforce licensing on every repo. Copyright, dual-license, CLA, README license section. Checked automatically on every release.
wip-license-guard check # audit current repo
wip-license-guard check --fix # audit and auto-fix issues
wip-license-guard init # interactive first-run setup
wip-license-guard init --from-standard # apply WIP Computer defaults without prompting
wip-license-guard readme-license # audit license blocks across all repos
wip-license-guard readme-license --fix # apply standard license block to all READMEs
wip-license-guard readme-license --dry-run # preview changes without writing
## License section with the standard blocktools/.license-guard.json in repo root. Created by init. Contains copyright holder, license type, year, and what to enforce.
{
"copyright": "WIP Computer, Inc.",
"license": "MIT+AGPL",
"year": 2026,
"enforceCLA": true,
"enforceReadmeLicense": true
}
Step 0 of wip-release reads .license-guard.json and runs the same checks. If compliance fails, the release is blocked.
--from-standard generates.license-guard.json with WIP Computer defaultsLICENSE file (dual MIT+AGPL)CLA.mdScans all repos in a directory and applies a standard license block to every README. Removes duplicate license sections from sub-tool READMEs. Reads templates from ai/wip-templates/readme/.
Pure JavaScript, no build step. Zero dependencies.
cli.mjs ... CLI entry pointcore.mjs ... license checking and generation logichook.mjs ... wip-release gate integrationwip-license-guardBuilt by Parker Todd Brooks, Lēsa (OpenClaw, Claude Opus 4.6), Claude Code (Claude Opus 4.6).
FAQs
License compliance for your own repos. Ensures correct copyright, dual-license blocks, and LICENSE files.
We found that @wipcomputer/wip-license-guard demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.