
Security News
AI Has Taken Over Open Source
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain
aicontext-commit
Advanced tools
AI commit messages that match your team's style — reads your last 30 commits to learn your conventions before suggesting anything
Commit messages that sound like your team wrote them, not a generic LLM.
accreads your last 30 commits before writing a single word — matching your style, language, and conventions automatically.
acc looks at what you have staged with git add, scans your recent commits to learn how this project writes commits, and asks an LLM (Anthropic or OpenAI) for 3 ready-to-use suggestions. Pick one, tweak it, or regenerate.
feat, fix, docs, build, ci, refactor…)npm install -g aicontext-commit
Or run on demand without installing:
npx aicontext-commit
The package exposes two binaries — aicontext-commit and the shorter alias acc.
Set one of the following API keys as an environment variable:
export ANTHROPIC_API_KEY=sk-ant-...
# or
export OPENAI_API_KEY=sk-...
If both are set, Anthropic is used. You can also drop them into a .env file in your project root. acc reads only the supported API key names from that file and does not inject the whole file into the process environment. See .env.example for the format.
# stage your changes as usual
git add .
# launch the picker
acc
You'll see something like:
Reading staged changes...
Generating suggestions...
? Choose a commit message: (Use arrow keys)
❯ feat(cli): add commit picker with 3 AI suggestions
feat: generate commit messages from staged diff using LLM
feat(acc): scaffold CLI to draft conventional commits
↺ Regenerate suggestions
✎ Write manually
Pick a suggestion → edit it inline if you want → press Enter → commit is created. Done.
| Option | What it does |
|---|---|
| Any suggestion | Opens an editable prompt pre-filled with the message, then commits |
| ↺ Regenerate suggestions | Asks the model again with the same prompt (useful if none fit) |
| ✎ Write manually | Type your own message from scratch |
Press Ctrl+C at any time to abort cleanly — no commit is created.
git diff --cached for the staged changes and git log --oneline -30 for style context.ANTHROPIC_API_KEY is set, otherwise gpt-5.4-mini if OPENAI_API_KEY is set.1. … / 2. … / 3. …; if parsing fails you get a clear error, not a bad commit.git commit -m "<your choice>" with the message you confirmed.git commit runs with a sanitized environment so API keys and secret-looking variables are not passed to hooks.git clone https://github.com/samuelurones28/aicontext-commit.git
cd aicontext-commit
npm install
# run from source
npm run dev
# build to dist/
npm run build
# run the test suite (builds first)
npm test
# preview what would be published
npm run smoke
The project is plain TypeScript compiled to CommonJS — no bundler. Tests use Node's built-in node:test runner against the compiled dist/ output.
src/
index.ts # CLI entrypoint, picker flow, commit execution
git.ts # staged diff + recent commits, with safety checks
prompt.ts # prompt template
ai.ts # provider detection (Anthropic/OpenAI) + parser
errors.ts # CliError class + typed error codes + formatter
bin/
index.js # thin wrapper that requires dist/index.js
tests/
*.test.js # node:test suites for each module
Set DEBUG=1 to print full stack traces for unexpected errors:
DEBUG=1 acc
Known errors come back with a code (NO_STAGED_CHANGES, MISSING_API_KEY, STAGED_DIFF_TOO_LARGE, AI_PARSE_ERROR, …) so you can grep them or wrap them in scripts.
MIT © Samuel Fernandez — see LICENSE.
FAQs
AI commit messages that match your team's style — reads your last 30 commits to learn your conventions before suggesting anything
The npm package aicontext-commit receives a total of 11 weekly downloads. As such, aicontext-commit popularity was classified as not popular.
We found that aicontext-commit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain

Security News
npm invalidated all granular access tokens that bypass 2FA after a fresh Mini Shai-Hulud wave compromised 323 npm packages. Staged publishing also entered public preview.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.