
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
bach-codecommander-mcp
Advanced tools
A developer-focused MCP server providing 17 tools for code analysis, JSON repair, encoding fix, import organization, format conversion, diff, and regex testing
A developer-focused Model Context Protocol (MCP) server that gives AI assistants code analysis, JSON repair, encoding fix, import organization, format conversion, file diff, and regex testing capabilities.
17 tools optimized for developers - the coding companion to FileCommander.
While FileCommander handles filesystem operations, CodeCommander focuses on code intelligence:
npm install -g bach-codecommander-mcp
git clone https://github.com/lukisch/bach-codecommander-mcp.git
cd bach-codecommander-mcp
npm install
npm run build
Add to your claude_desktop_config.json:
Windows: %APPDATA%\Claude\claude_desktop_config.json
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"codecommander": {
"command": "bach-codecommander"
}
}
}
{
"mcpServers": {
"codecommander": {
"command": "node",
"args": ["/absolute/path/to/bach-codecommander-mcp/dist/index.js"]
}
}
}
FileCommander and CodeCommander are designed to work side by side:
{
"mcpServers": {
"filecommander": {
"command": "bach-filecommander"
},
"codecommander": {
"command": "bach-codecommander"
}
}
}
| Tool | Description |
|---|---|
cc_analyze_code | Full code analysis: classes, functions, imports, LOC, complexity |
cc_analyze_methods | Detailed method analysis: params, decorators, visibility, data flow |
cc_extract_classes | Extract Python classes/functions as separate text blocks |
| Tool | Description |
|---|---|
cc_organize_imports | Sort & deduplicate Python imports per PEP 8 |
cc_diagnose_imports | Detect unused imports, duplicates, circular import risks |
| Tool | Description |
|---|---|
cc_fix_json | Repair broken JSON (BOM, trailing commas, comments, single quotes) |
cc_validate_json | Validate JSON with detailed error position and context |
| Tool | Description |
|---|---|
cc_fix_encoding | Fix Mojibake / double-encoded UTF-8 (27+ patterns) |
cc_cleanup_file | Remove BOM, NUL bytes, trailing whitespace, normalize line endings |
cc_fix_umlauts | Repair broken German umlauts (70+ patterns, HTML entities, escapes) |
| Tool | Description |
|---|---|
cc_scan_emoji | Scan files for emojis with codepoint info |
| Tool | Description |
|---|---|
cc_convert_format | Convert between JSON, CSV, INI, YAML, TOML, XML, and TOON formats |
cc_generate_licenses | Generate third-party license file (npm/pip) |
| Tool | Description |
|---|---|
cc_diff_files | Compare two files with unified diff output (configurable context lines) |
cc_regex_test | Test regex patterns against text/files with match details, groups, and replace preview |
| Tool | Description |
|---|---|
cc_md_to_html | Markdown to standalone HTML with CSS styling (headers, code blocks, tables, nested lists, blockquotes, images, checkboxes) |
cc_md_to_pdf | Markdown to PDF via headless browser (Edge/Chrome). Falls back to HTML if no browser is available |
Total: 17 tools
7 tools exist in both FileCommander and CodeCommander for convenience:
| FileCommander | CodeCommander | Function |
|---|---|---|
fc_fix_json | cc_fix_json | JSON repair |
fc_validate_json | cc_validate_json | JSON validation |
fc_fix_encoding | cc_fix_encoding | Encoding repair |
fc_cleanup_file | cc_cleanup_file | File cleanup |
fc_convert_format | cc_convert_format | Format conversion (JSON/CSV/INI/YAML/TOML/XML/TOON) |
fc_md_to_html | cc_md_to_html | Markdown to HTML export |
fc_md_to_pdf | cc_md_to_pdf | Markdown to PDF export |
All tools use the cc_ prefix (CodeCommander) to avoid conflicts with FileCommander's fc_ prefix and other MCP servers.
See SECURITY.md for detailed security information.
Key points:
dry_run modenpm install
npm run dev # Watch mode
npm run build # One-time build
npm start # Start server
See CHANGELOG.md for the full version history.
MIT - Lukas (BACH)
FAQs
A developer-focused MCP server providing 17 tools for code analysis, JSON repair, encoding fix, import organization, format conversion, diff, and regex testing
We found that bach-codecommander-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.