
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
agent-regress-cli
Advanced tools
Statistical regression testing for LLM agents from the command line. Thin Node wrapper around the PyPI agent-regress-cli package (agent-regress command) -- compare two agent versions and get a p-value, Cohen's d, and a bootstrap CI on whether behavior act
Statistical regression testing for LLM agents, from the command line or npx.
This is a thin Node.js wrapper around the agent-regress-cli Python package (its console command is agent-regress; the PyPI distribution is named agent-regress-cli since agent-regress was blocked as too similar to an unrelated existing project) -- the actual statistics (Mann-Whitney U, bootstrap confidence interval, Cohen's d) run in Python, so you need Python installed too:
pip install agent-regress-cli
(uv tool install agent-regress-cli or pipx install agent-regress-cli also work, and this wrapper will fall back to uvx/pipx automatically if the agent-regress command isn't on your PATH.)
npm install -g agent-regress-cli
Or run it without installing:
npx agent-regress-cli --help
npx agent-regress-cli compare \
--version-a-results version_a_scores.json \
--version-b-results version_b_scores.json \
--metric task_success_rate \
--json
Each --version-*-results file is a JSON array of per-run scores, e.g. [0.82, 0.79, 0.91]. --json prints a single machine-readable JSON object to stdout (verdict, p-value, Cohen's d, confidence interval) -- built for agents and CI scripts to parse.
Full documentation, the Python API, and the statistics methodology live in the main repo:
FAQs
Statistical regression testing for LLM agents from the command line. Thin Node wrapper around the PyPI agent-regress-cli package (agent-regress command) -- compare two agent versions and get a p-value, Cohen's d, and a bootstrap CI on whether behavior act
The npm package agent-regress-cli receives a total of 1 weekly downloads. As such, agent-regress-cli popularity was classified as not popular.
We found that agent-regress-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.