
Research
/Security News
Popular Rust Crates Compromised in Build-Time Supply Chain Attack
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.
Codmir CLI - AI-powered development platform. Login, link projects, manage background services, and interact with the Overseer agent.
Official Codmir CLI - AI-powered autonomous agent for developers.
# Install globally
npm install -g codmir
# Or use with npx
npx codmir
# Login to your Codmir account
codmir login
# Start an interactive AI session
codmir
# Ask a question about your codebase
codmir "How is authentication implemented?"
# Analyze your project
codmir analyze
# Start interactive AI assistant
codmir
# You can then chat naturally:
# > How do I add a new API endpoint?
# > Explain the database schema
# > Help me fix this error: [paste error]
# Link current directory to a Codmir project
codmir link
# Show project status
codmir status
# Analyze codebase and generate insights
codmir analyze
# Create a new task
codmir task create "Implement user authentication"
# List tasks
codmir task list
# Get task details
codmir task show <task-id>
# Login to Codmir
codmir login
# Show current user
codmir whoami
# Logout
codmir logout
Advanced AI agent capabilities powered by the 5-layer intelligence system:
# Analyze entire codebase architecture
codmir agent analyze
# Analyze with focus area
codmir agent analyze --focus auth
# Trace a feature across UI/API/DB/Jobs
codmir agent trace authentication
# Search repository
codmir agent search "user validation"
# List all workflows
codmir agent workflow list
# Run a specific workflow
codmir agent workflow run trace-feature
# Query knowledge base
codmir agent knowledge search "prisma"
# List knowledge entries
codmir agent knowledge list
Built-in Workflows:
analyze-codebase - Full repository analysistrace-feature - Follow feature across all layerssafe-refactor-plan - Generate refactoring plannext15-app-router-audit - Next.js 15 specific audit# Sync local context to cloud
codmir sync
# Push local changes
codmir sync push
# Pull remote changes
codmir sync pull
The CLI uses the following environment variables:
| Variable | Description | Default |
|---|---|---|
CODMIR_API_KEY | API key for authentication | - |
CODMIR_API_URL | Custom API endpoint | https://codmir.com/api |
CODMIR_PROJECT_ID | Default project ID | - |
You can also create a .codmir config file in your project root:
{
"projectId": "your-project-id",
"organization": "your-org-slug"
}
# Review staged changes
codmir "Review my staged changes for potential issues"
# Review a specific file
codmir "Review src/auth/login.ts for security issues"
# Get help with an error
codmir "I'm getting this error: TypeError: Cannot read property 'id' of undefined"
# Explain code behavior
codmir "Why is this function returning null?"
# Generate code
codmir "Write a function to validate email addresses"
# Generate tests
codmir "Write unit tests for the UserService class"
# Generate documentation
codmir "Document the API endpoints in src/routes/"
# Explain code
codmir "Explain how the payment flow works"
You can also import the CLI functionality in your Node.js projects:
import { createContext } from 'codmir/context';
import { syncToCloud } from 'codmir/sync';
// Create a context for the current directory
const context = await createContext({
rootDir: process.cwd(),
includeGitHistory: true,
});
// Sync to cloud
await syncToCloud(context, {
projectId: 'your-project-id',
});
@codmir/sdk - TypeScript/JavaScript SDK for the Codmir API@codmir/types - Shared type definitionsMIT
FAQs
Codmir CLI - AI-powered development platform. Login, link projects, manage background services, and interact with the Overseer agent.
The npm package codmir receives a total of 2,341 weekly downloads. As such, codmir popularity was classified as popular.
We found that codmir demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Research
/Security News
Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Security News
NIST disclosed an unreleased AI tool called V-etalon and opened a broad inquiry into NVD modernization after years of automation plans produced no public enrichment system.