
Security News
Feross on the 10 Minutes or Less Podcast: Nobody Reads the Code
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.
Codebuff is a CLI tool that writes code for you.
codebuff from your project directoryNote: Codebuff will run commands in your terminal as it deems necessary to fulfill your request.
To install Codebuff, run:
npm install -g codebuff
(Use sudo if you get a permission error.)
After installation, you can start Codebuff by running:
codebuff [project-directory]
If no project directory is specified, Codebuff will use the current directory.
Once running, simply chat with Codebuff to say what coding task you want done.
Our users regularly use Codebuff to implement new features, write unit tests, refactor code,write scripts, or give advice.
To unlock the full benefits of modern LLMs, we recommend storing knowledge alongside your code. Add a knowledge.md file anywhere in your project to provide helpful context, guidance, and tips for the LLM as it performs tasks for you.
Codebuff can fluently read and write files, so it will add knowledge as it goes. You don't need to write knowledge manually!
Some have said every change should be paired with a unit test. In 2024, every change should come with a knowledge update!
knowledge.md file and collect specific points of advice. The assistant will use this knowledge to improve its responses.undo or redo to revert or reapply file changes from the conversation.Esc or Ctrl+C while Codebuff is generating a response to stop it.If you are getting permission errors during installation, try using sudo:
sudo npm install -g codebuff
If you still have errors, it's a good idea to reinstall Node.
If you see Failed to download codebuff: Request timeout or Failed to determine latest version, you may be behind a corporate proxy or firewall.
Codebuff respects standard proxy environment variables. Set HTTPS_PROXY to route traffic through your proxy:
Linux / macOS (bash/zsh):
export HTTPS_PROXY=http://your-proxy-server:port
codebuff
Windows (PowerShell):
$env:HTTPS_PROXY = "http://your-proxy-server:port"
codebuff
Windows (CMD):
set HTTPS_PROXY=http://your-proxy-server:port
codebuff
To make it permanent, add the export or set line to your shell profile (e.g. ~/.bashrc, ~/.zshrc, or Windows System Environment Variables).
Supported environment variables:
| Variable | Purpose |
|---|---|
HTTPS_PROXY / https_proxy | Proxy for HTTPS requests (recommended) |
HTTP_PROXY / http_proxy | Fallback proxy for HTTP requests |
NO_PROXY / no_proxy | Comma-separated list of hostnames to bypass the proxy (port suffixes are ignored) |
Both http:// and https:// proxy URLs are supported. Proxy authentication is supported via URL credentials (e.g. http://user:password@proxy:port).
We value your input! Please email your feedback to founders@codebuff.com. Thank you for using Codebuff!
FAQs
AI coding agent
The npm package codebuff receives a total of 5,101 weekly downloads. As such, codebuff popularity was classified as popular.
We found that codebuff demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.