
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
codeflow-hook
Advanced tools
An interactive CI/CD simulator and lightweight pre-push code reviewer using Gemini AI
AI-Powered Code Analysis and Git Hook Management
A lightweight command-line tool that provides AI-driven code analysis, automated git hook installation, and intelligent code review capabilities. This standalone CLI tool analyzes your local code changes using advanced AI models (Gemini, OpenAI GPT, or Claude) and helps maintain code quality through automated pre-commit and pre-push checks.
✨ Standalone Package: This CLI tool works independently and can be installed globally via npm. No additional setup or enterprise infrastructure required.
npm install -g codeflow-hook
npm install --save-dev codeflow-hook
Choose your AI provider and configure with your API key:
# Gemini (default, recommended)
codeflow-hook config -p gemini -k YOUR_GEMINI_API_KEY
# OpenAI
codeflow-hook config -p openai -k YOUR_OPENAI_API_KEY
# Claude/Anthropic
codeflow-hook config -p claude -k YOUR_CLAUDE_API_KEY
codeflow-hook install
# Analyze your current changes
git diff | codeflow-hook analyze-diff
# Or let the hooks run automatically on commit/push
git add .
git commit -m "feat: add new feature"
codeflow-hook config # Configure AI provider settings
codeflow-hook install # Install git hooks
codeflow-hook analyze-diff # Analyze code changes
codeflow-hook index # Build local knowledge base
codeflow-hook status # Check installation status
# Configure with Gemini (default)
codeflow-hook config -p gemini -k your-api-key
# Install hooks in current project
codeflow-hook install
# Analyze staged changes
git diff --staged | codeflow-hook analyze-diff
# Build project knowledge base
codeflow-hook index
# Check everything is working
codeflow-hook status
Configuration is stored in ~/.codeflow-hook/config.json:
{
"provider": "gemini",
"apiKey": "your-api-key",
"model": "gemini-1.5-pro-latest"
}
provider: "gemini" - Google AI (recommended)provider: "openai" - GPT modelsprovider: "claude" - Anthropic models~/.codeflow-hook/config.json"No configuration found"
codeflow-hook config -k YOUR_API_KEY
Hooks not running
codeflow-hook install
# On Windows, ensure hooks are executable
API errors
If automatic installation fails:
.git/hooks/pre-commit:#!/bin/sh
codeflow-hook analyze-diff
chmod +x .git/hooks/pre-commit
MIT License
🚀 Enhance your development workflow with AI-powered code analysis!
npm install -g codeflow-hook
codeflow-hook config -k YOUR_API_KEY
codeflow-hook install
FAQs
An interactive CI/CD simulator and lightweight pre-push code reviewer using Gemini AI
We found that codeflow-hook demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.