
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
Track your AI coding spend across Claude, Codex, Gemini & Antigravity.
AWARTS (A Worldwide AI Rating & Tracking System) is the Strava for AI-assisted coding. This CLI automatically detects your AI tool usage and syncs it to awarts.vercel.app so you can track spend, compare with others, and climb the leaderboard.
npx awarts@latest
Or install globally:
npm i -g awarts
Requires Node.js 18+.
# 1. Authenticate with your AWARTS account
awarts login
# 2. Auto-detect all providers and push usage data
awarts sync
# 3. Start background auto-sync (every 5 minutes)
awarts daemon start
| Command | Description |
|---|---|
awarts login | Authenticate via device auth flow |
awarts sync | Auto-detect all providers and push data |
awarts push | Push data from specific provider |
awarts status | Show auth status and detected providers |
awarts seed | Generate sample data for testing |
awarts daemon start | Start background auto-sync daemon |
awarts daemon stop | Stop the daemon |
awarts daemon status | Check if daemon is running |
awarts daemon logs | View daemon output |
awarts keys set | Store an API key for a provider |
awarts keys list | List stored keys (masked) |
awarts keys remove | Remove a stored key |
awarts logout | Clear stored credentials |
| Provider | Detection | Path |
|---|---|---|
| Claude | Auto-detected | ~/.claude/stats-cache.json |
| Codex | Auto-detected | ~/.codex/usage/ |
| Gemini | Auto-detected | ~/.gemini/usage/ |
| Antigravity | Auto-detected | ~/.antigravity/usage/ |
No problem. The CLI reads local files created by your AI tools. No API keys required.
~/.claude/# Push data for a specific provider only
awarts push --provider claude
# Preview what would be pushed (dry run)
awarts push --dry-run
# Generate 14 days of sample data
awarts seed --days 14
# Set sync interval to 10 minutes
awarts daemon start --interval 10
# Force re-authentication
awarts login --force
Store API keys locally for provider billing data. Keys are stored in ~/.awarts/keys.json and never leave your machine.
awarts keys set openai sk-...
awarts keys set google AIza...
awarts keys list
awarts keys remove openai
All credentials and keys are stored locally:
| File | Purpose |
|---|---|
~/.awarts/auth.json | Authentication token |
~/.awarts/keys.json | API keys (local only) |
~/.awarts/daemon.pid | Daemon process ID |
~/.awarts/daemon.log | Daemon log output |
View your stats, follow other developers, and climb the leaderboard at:
See CONTRIBUTING.md for guidelines.
MIT - Harshal Jain (harry.dev)
FAQs
Track your AI coding across Claude, Codex, Gemini & Antigravity
We found that awarts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.