
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
c7)A simple and convenient command-line interface (CLI) for interacting with the Context7 API.
Quickly search for projects, get information about them, and query specific topics within a project's context, all directly from your terminal. Provides the c7 command.
⚠️ Important: All data provided by this tool comes directly from the official Context7 API (https://context7.com). This tool is simply a convenient wrapper and does not generate or host any content itself.
txt, default) or structured json.llms_{project}.{format}).fetch, but should work with v16+ if needed)npm install -g context7
yarn i -g context7
bun i -g context7
The basic command structure is:
c7 [command] [arguments...] [options...]
Fetches information about a specific topic within a project. This is the default command if no other command (search, info) is specified.
Syntax:
c7 <projectname> <query...> [options]
Arguments:
<projectname>: The exact name of the project (e.g., nextjs, react, uv). Use c7 search <term> to find valid names. (Required)<query...>: The topic, question, or keywords to query within the project's context. (Required)Options:
--type, -t: Specify the output format.
txt (Default)json--save, -s: Save the output to a file named llms_{projectname}.{format} in the current directory instead of printing to the console. (Boolean flag)--tokens, -k: Specify the maximum number of tokens for the API response. (e.g., --tokens 1000). The API default is used if omitted. (Number)Examples:
# Get info about data fetching in Next.js (default TXT output)
c7 nextjs data fetching strategies
# Get info about state management in React, output as JSON
c7 react state management -t json
# Search for info on installation in the 'uv' project and save to llms_uv.txt
c7 uv installation steps --save
# Query Node.js streams and save the result as llms_nodejs.json
c7 nodejs streams api -t json -s
# Query Next.js data fetching and use only 1000 tokens
c7 nextjs data fetching -k 1000
Searches for available Context7 projects based on a keyword in their title. It filters out projects whose internal path contains a /, as these are often duplicates or not directly queryable via this tool.
Syntax:
c7 search <term>
Arguments:
<term>: The keyword to search for in project titles (e.g., react, python, aws). (Required)Example:
c7 search next
# Output might look like:
# --- Search Results (Use "Project Name" for queries) ---
# - Next.js (Project Name: nextjs)
# -------------------------------------------------------
# Example query: c7 nextjs <your query>
Displays metadata associated with a specific project.
Syntax:
c7 info <projectname>
Arguments:
<projectname>: The exact project name (e.g., nextjs, react). Use the name shown in parentheses from the search command results. (Required)Example:
c7 info react
# Output will show details like Title, Project Name, Docs Source, Last Update, etc.
You can always get help on commands and options:
c7 --help # General help for all commands
c7 query --help # Help specifically for the query command (same as default)
c7 search --help # Help for the search command
c7 info --help # Help for the info command
npm install or bun install).npm link or bun link).FAQs
CLI to query the Context7 API
The npm package context7 receives a total of 842 weekly downloads. As such, context7 popularity was classified as not popular.
We found that context7 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.