
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
codexai-cli
Advanced tools
A CLI tool for AI-powered code analysis and automated code review using AI.
A CLI tool for AI-powered code analysis and automated code review using AI.
Version: 1.0.0
# Install globally
npm install -g @codexai/cli
# Use immediately
codeai login
codeai analyze .
# Clone and install
git clone https://github.com/codeai-org/cli.git
cd cli
npm install
npm run build
npm link
# Use the linked command
codeai --help
codeai login - Authenticate via web browser
codeai logout - Remove stored authentication
codeai analyze <paths...> - Upload and analyze code
codeai analyze [options] <paths...>
Arguments:
paths Files or folders to analyze (required)
Options:
-p, --project <name> Assign a name to this analysis project
-t, --task <type> Analysis task type (default: "REVIEW")
-h, --help Show help for analyze command
Supported Task Types: REVIEW, UNIT_TESTS (and any other types supported by your CodeAI API)
# Install from npm
npm install -g @codexai/cli
# Start using immediately - no configuration needed!
codeai login
codeai analyze .
Source code is available for licensed partners. Contact support@codeai.com for access.
# 1. Login first
codeai login
# 2. Analyze current directory
codeai analyze .
# 3. Analyze specific files
codeai analyze src/ package.json
# 4. Analyze with project name
codeai analyze . --project "My Project"
# 5. Analyze with specific task
codeai analyze . --task UNIT_TESTS
# 6. Logout when done
codeai logout
codeai --help
codeai analyze --help
Authentication: Uses web-based OAuth flow
~/.codeai/config.jsonFile Processing: Creates ZIP archive
Analysis: Uploads to API
~/.codeai/config.json (API key storage).env (API URLs and settings)For technical support, feature requests, or enterprise inquiries:
npm install and npm run buildnode dist/index.js login)This README reflects the actual current functionality of the CLI as implemented.
FAQs
A CLI tool for AI-powered code analysis and automated code review using AI.
We found that codexai-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.