Privacy-first, BYOAI (Bring Your Own AI) inline changelog intelligence for Visual Studio Code.
DevDiff explains your Git diffs directly inside VS Code. It is built from the ground up for developers who care about security, privacy, and understanding what changes are entering their codebase.
📖 Want to learn more? Read the full setup guides, configuration options, and architectural deep-dives at our official documentation site: devdiff.vercel.app.
Search for DevDiff in the Extensions view (Ctrl+Shift+X or Cmd+Shift+X) and click Install.
For offline development, air-gapped environments, or pre-release verification, you can install the extension from the packaged VSIX file:
devdiff-1.0.3.vsix (also available on GitHub Releases)Ctrl+Shift+X or Cmd+Shift+X).... (More Actions) button in the upper-right corner of the Extensions view.devdiff-1.0.3.vsix file and click Install.Before using the extension, initialize DevDiff in your repository root:
npx devdiff init
This generates your local .devdiff.config.js configuration file. For advanced configuration options, see the Configuration Guide.
Open the VS Code Command Palette (Ctrl+Shift+P or Cmd+Shift+P) to run:
DevDiff: Explain Staged Changes — Analyzes staged changes and generates explanations.DevDiff: Show Changelog — Displays the list of generated changelogs.DevDiff: Toggle Auto-Watch — Toggles automatic background analysis.DevDiff: Show Output Panel — Displays the DevDiff diagnostic logs.Customize DevDiff under Settings (Ctrl+, or Cmd+,) by searching for devdiff:
| Setting | Type | Default | Description | Documentation Link |
|---|---|---|---|---|
devdiff.persona | string | "developer" | Choose from: developer, ceo, educator, pm, or compliance to change the perspective. | Personas |
devdiff.autoGenerate | boolean | false | Automatically analyze changes when staged in Git. | Configuration |
devdiff.showGutterAnnotations | boolean | true | Display subtle inline decorations in the editor gutter for changed lines. | Configuration |
DevDiff includes a strict sandboxing layer that limits file access to your workspace boundary.
| Resource | Why | Default | Can Disable | Docs |
|---|---|---|---|---|
| File System | Reads git repositories, writes changelogs | Yes | No (core function) | Security Model |
| Shell | Executes local git commands, detects tools | Yes | Yes | Security Model |
| Network | Resolves cloud AI endpoints (optional) | No | Yes (default off) | Network Guard |
Every operation is fully auditable. You can inspect all past commands, network checks, and AI accesses locally:
npx devdiff audit --package @eldrex/vscode
FAQs
Privacy-first, BYOAI inline changelog intelligence for VS Code
We found that devdiff demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.
Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.
Security News
The White House’s Gold Eagle Initiative aims to coordinate AI-discovered vulnerabilities, validate findings, and accelerate patching across critical software.