
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
End-of-day recap for AI-assisted coding sessions. Reads OpenCode, Claude Code, Cursor, and Codex conversations, cross-references with git, and generates standup-ready summaries.
End-of-day recap for AI-assisted coding sessions. Reads your local conversations from OpenCode, Claude Code, Cursor, and Codex, cross-references with git, and generates standup-ready summaries.

| Tool | Data source |
|---|---|
| OpenCode | ~/.local/share/opencode/storage/ |
| Claude Code | ~/.claude/ (SQLite + JSONL) |
| Cursor | ~/Library/Application Support/Cursor/User/globalStorage/state.vscdb |
| Codex | ~/.codex/sessions/ (JSONL + legacy JSON) |
| Gemini CLI | WIP |
npm install -g devday
git clone https://github.com/ujjwaljainnn/devday.git
cd devday
npm install
npm run build
npm link
devday # today's recap
devday -d yesterday # yesterday
devday -d 2026-02-11 # specific date
devday --standup # short standup format
devday --json # machine-readable output
devday --no-git # skip git integration
devday --no-summarize # skip LLM summaries
devday -v # debug output
Summaries are optional. Without an API key, devday shows stats and git only.
export CONCENTRATE_API_KEY=sk-cn-...
# or
export OPENAI_API_KEY=sk-...
export ANTHROPIC_API_KEY=sk-...
# optional: enrich standup with Linear ticket context via MCP
export LINEAR_MCP_SERVER_URL=https://your-linear-mcp-server.example.com/mcp
export LINEAR_MCP_AUTH_TOKEN=lin_...
Concentrate AI is a unified LLM gateway that routes to 50+ models (GPT-5, Claude, Gemini, etc.) through a single API key. devday uses it with gpt-5-mini for fast, cheap summarization.
$20 in free credits when you sign up — more than enough to run devday for months.
If LINEAR_MCP_SERVER_URL is set, devday enables a Linear MCP tool during standup generation. The summarizer will try to pull:
When data is available, standup output may include bullets like Things I'm working on and Things I'm planning to work on.
devday reads completed sessions from each tool's local storage. Sessions are grouped by project directory, and git commits are matched by date.
Duration is calculated from actual message processing times (not wall-clock), capped at 5 minutes per message to handle tools that write bogus completion timestamps.
Cost is estimated from token counts and model pricing tables when the tool doesn't provide it directly.
Contributions are welcome. Fork the repo, make your changes, and open a PR.
If you use this tool and think it can be better — parsers for new tools, better summaries, new output formats, whatever — send it through. Let's make this thing more useful.
FAQs
End-of-day recap for AI-assisted coding sessions. Reads OpenCode, Claude Code, Cursor, and Codex conversations, cross-references with git, and generates standup-ready summaries.
We found that devday demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.