🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

devdiff

Package Overview
Dependencies
Maintainers
1
Versions
5
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

devdiff

Privacy-first, BYOAI inline changelog intelligence for VS Code

Source
npmnpm
Version
1.0.4
Version published
Weekly downloads
22
22.22%
Maintainers
1
Weekly downloads
 
Created
Source

DevDiff VS Code Extension

Privacy-first, BYOAI inline changelog intelligence for Visual Studio Code.

DevDiff Logo

DevDiff explains your Git diffs directly inside VS Code. It is built from the ground up for developers who care about security, privacy, and understanding what changes are entering their codebase.

📦 Installation Options

Search for DevDiff in the Extensions view (Ctrl+Shift+X or Cmd+Shift+X) and click Install.

Option 2: Install from packaged VSIX

For offline development, air-gapped environments, or pre-release verification, you can install the extension from the packaged VSIX file:

  • Download the packaged artifact: devdiff-1.0.3.vsix (also available on GitHub Releases)
  • Open VS Code.
  • Open the Extensions view (Ctrl+Shift+X or Cmd+Shift+X).
  • Click the ... (More Actions) button in the upper-right corner of the Extensions view.
  • Select Install from VSIX...
  • Select the downloaded devdiff-1.0.3.vsix file and click Install.
  • Reload VS Code if prompted.

🚀 Key Features

  • Inline Explanations: Generate detailed explanations for staged changes with a single click.
  • Privacy-First Design: Zero telemetry, zero analytics tracking, and zero third-party source code exposure.
  • Local-First AI: Connects out-of-the-box to local models using Ollama (Llama 3.2, Llama 3.1, CodeLlama) so no code leaves your machine.
  • Multi-Agent Consensus: Orchestrates a swarm of specialized local agents (Architect, Security, Performance, and Docs) to build consensus on code impact.
  • Vibe-Coding Resilience: Automatically takes pre-AI checkpoints and enables recovery if routed providers fail.

🛠️ Usage Guide

1. Initialize the Workspace

Before using the extension, initialize DevDiff in your repository root:

npx devdiff init

This generates your local .devdiff.config.js configuration file.

2. VS Code Commands

Open the VS Code Command Palette (Ctrl+Shift+P or Cmd+Shift+P) to run:

  • DevDiff: Explain Staged Changes — Analyzes staged changes and generates explanations.
  • DevDiff: Show Changelog — Displays the list of generated changelogs.
  • DevDiff: Toggle Auto-Watch — Toggles automatic background analysis.
  • DevDiff: Show Output Panel — Displays the DevDiff diagnostic logs.

⚙️ Configuration Settings

Customize DevDiff under Settings (Ctrl+, or Cmd+,) by searching for devdiff:

SettingTypeDefaultDescription
devdiff.personastring"developer"Choose from: developer, ceo, educator, pm, or compliance to change the perspective.
devdiff.autoGeneratebooleanfalseAutomatically analyze changes when staged in Git.
devdiff.showGutterAnnotationsbooleantrueDisplay subtle inline decorations in the editor gutter for changed lines.

🔒 Security, Privacy & Sandboxing

What This Package Accesses

ResourceWhyDefaultCan Disable
File SystemReads git repositories, writes changelogsYesNo (core function)
ShellExecutes local git commands, detects toolsYesYes
NetworkResolves cloud AI endpoints (optional)NoYes (default off)

Auditable Logs

Every operation is fully auditable. You can inspect all past commands, network checks, and AI accesses locally:

npx devdiff audit --package @eldrex/vscode

FAQs

Package last updated on 04 Jul 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts