
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
Index your codebase locally and push AI knowledge cards to a codeprism engine.
npx codeprism index
npx codeprism push --engine-url https://yourteam.codeprism.dev --api-key sk_xxx --delete
npm install -g codeprism
# or use npx (no install needed)
npx codeprism --help
codeprism indexIndexes all repositories in your workspace using your own LLM key. Results are written to a local codeprism.db file.
CODEPRISM_LLM_PROVIDER=anthropic \
CODEPRISM_LLM_API_KEY=sk-ant-... \
codeprism index
Supported LLM providers: anthropic, openai, deepseek, gemini
Options:
--force — reindex everything regardless of git changes--repo <name> — restrict to a single repo--skip-docs — skip doc generation (faster)--ticket <id> — bias indexing toward a ticket (e.g. ENG-123)codeprism pushUpload a local codeprism.db to a hosted engine so your whole team benefits.
codeprism push \
--engine-url https://yourteam.codeprism.dev \
--api-key YOUR_TEAM_API_KEY \
--delete
Options:
--engine-url — hosted engine URL (or CODEPRISM_ENGINE_URL env var)--api-key — team API key (or CODEPRISM_API_KEY env var)--db — path to local DB (auto-detected if omitted)--delete — delete the local DB after a successful pushcodeprism install-hookInstall git hooks in the current repo to sync file changes automatically after commits.
codeprism install-hook --engine-url https://yourteam.codeprism.dev
codeprism syncManually notify a running codeprism server about git changes.
codeprism checkLLM-powered PR diff checker against team rules.
codeprism rules list|add|deleteManage team coding rules stored in the local engine DB.
Place codeprism.config.json at your workspace root to explicitly list repos:
{
"repos": [
{ "path": "./api", "name": "my-api" },
{ "path": "./frontend", "name": "my-frontend" }
]
}
Without a config file, codeprism auto-discovers repos in sibling directories.
| Variable | Description |
|---|---|
CODEPRISM_LLM_PROVIDER | LLM provider: anthropic, openai, deepseek, gemini |
CODEPRISM_LLM_API_KEY | Your personal LLM API key (used only for local indexing) |
CODEPRISM_LLM_MODEL | Override the default model |
CODEPRISM_DB_PATH | Path to the local SQLite DB (default: ./codeprism.db) |
CODEPRISM_ENGINE_URL | Hosted engine base URL |
CODEPRISM_API_KEY | Team API key for codeprism push |
MIT
FAQs
Index your codebase locally and push AI knowledge cards to a codeprism engine
The npm package codeprism receives a total of 2 weekly downloads. As such, codeprism popularity was classified as not popular.
We found that codeprism demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.