
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
Intelligent repository cleanup with auto mode, AI learning, markdown consolidation, auto-consolidate workflow, context-aware classification, and cost optimization
Repository cleanup utility for vibe coding sessions
Quick Links:
Stop the chaos after intense AI-assisted coding sessions. UnVibe intelligently organizes your repositories, respects git boundaries, and keeps your monorepos clean.
Choose your workflow: Compress (clean everything) or Document-Archive (organize and preserve).
# COMPRESS MODE (default): Consolidate + clean up
devibe consolidate:auto
# โ Clean root with only consolidated file + README
# โ AI automatically includes related .txt, .log files
# โ Cleans up UUID backup artifacts
# DOCUMENT-ARCHIVE MODE: Organize into folders
devibe consolidate:auto --document-archive
# โ Files moved to ./documents/, summary in root
# Recursive compress: Process all git boundaries
devibe consolidate:auto --recursive-compress
Features:
./documents/ with AI organization, preserves originals--include-related lets AI decide which .txt/.log files to include--recursive-compress for nested git boundaries.devibe/backups/Fully automated markdown consolidation workflow that respects git repository boundaries!
# Auto-consolidate current directory (respects git boundaries)
devibe consolidate:auto
# Process monorepo - each nested repo processed independently
devibe consolidate:auto /path/to/monorepo
# With options
devibe consolidate:auto --max-output 3 --suppress-toc
Key Features:
.devibe/Perfect for:
Advanced AI-powered markdown consolidation for interactive workflows.
โ
Mono-repo friendly - Respects multiple .git boundaries
โ
Secret detection - Scans for 31 types of hardcoded secrets (API keys, tokens, credentials)
โ
100% reversible - All operations backed up automatically with restore capability
โ
Build validation - Ensures cleanup doesn't break builds (Node.js, Docker, Python, Go)
โ
Dry-run mode - Preview changes before applying across all commands
โ
Multi-provider AI - Support for Anthropic Claude, OpenAI GPT, Google Gemini (7 models)
โ
90% accuracy - AI-powered file classification with context awareness
โ
Learning system - Learns from corrections and improves over time
โ
Cost optimization - 98% savings with smart model selection (Gemini Flash vs Claude Sonnet)
โ
Secure keys - AES-256 encrypted API key storage in ~/.devibe/
โ
Auto mode - One-command cleanup: devibe --auto or devibe yolo
โ
Intelligent classification - Multi-stage: learning โ structure โ dependencies โ AI
โ
GitIgnore management - Auto-excludes .devibe/ and .unvibe/ directories
โ
GitHub integration - Pre-push hooks and Actions for CI/CD
โ
Progress tracking - Real-time feedback with detailed status updates
โ
8 test categories - unit, integration, e2e, tdd, functional, performance, acceptance, contract
โ
6 technology stacks - Node.js, React, Python, Go, Java, .NET/C#
โ
Smart detection - Automatic pattern matching and categorization
โ
Organization reports - Detailed breakdown by category and technology
โ
Best practices analyzer - 40+ automated checks across 8 categories
โ
Rule packs - Shareable directory structure standards (YAML/JSON)
โ
Weighted scoring - 0-100 quality score with severity levels
โ
Auto-fix detection - Identifies issues that can be automatically resolved
โ
CI/CD ready - JSON output for automation pipelines
โ Project convention analysis - Auto-detects existing docs/, scripts/, and root file conventions โ Intelligent indexing - Creates smart docs/INDEX.md and scripts/INDEX.md with categorization โ Folder conflict resolution - Interactive merge when both docs/ and documents/ exist โ README AI integration - Adds AI-visible navigation instructions to guide assistants โ Important file protection - Never consolidates README, CHANGELOG, CONTRIBUTING, LICENSE โ Markdown consolidation - AI-powered doc organization with topic clustering โ Relevance analysis - Multi-factor scoring (recency, quality, connectivity) โ Smart strategies - Merge, summarize, archive, or create navigation hub โ Content preservation - Validation and backup with rollback capability
โ
Non-intrusive UX - Smart prompting (max 2 times, then silent)
โ
Folder enforcement - Maintains scripts/ and documents/ structure
โ
Helpful recommendations - Context-aware suggestions for improvements
โ
Comprehensive docs - 20+ guides covering all features and workflows
# Install globally
npm install -g devibe
# Or use with npx (no installation)
npx devibe
devibe --version
# Should show: 1.8.7
devibe --help
# Shows all available commands
NPM Package: https://www.npmjs.com/package/devibe
# Quick auto-organize (recommended!)
devibe --auto
# or
devibe yolo
# Show repository status
devibe
# Scan for secrets before commit
devibe scan
# Plan file distribution
devibe plan
# Execute with backup
devibe execute
# Enforce folder structure
devibe enforce
# Validate builds
devibe validate
# Check repository best practices
devibe best-practices
# Validate a rule pack file
devibe validate-rulepack my-pack.json
# Consolidate markdown documentation (NEW in v1.7.0!)
devibe consolidate ./docs --dry-run
Devibe intelligently detects and respects your existing folder structure:
For documentation:
docs/ exists โ uses it automaticallydocuments/ exists โ uses it automatically.devibe/config.jsonFor scripts:
scripts/ exists โ uses it automaticallyscript/ exists โ uses it automatically.devibe/config.jsonWhen both folders exist, you'll see this once per project:
Documentation folders:
โ ๏ธ Found both docs/ and documents/ folders
Options:
1. Use docs/ folder (skip documents/)
2. Use documents/ folder (skip docs/)
3. Merge documents/ โ docs/ (move all files)
4. Merge docs/ โ documents/ (move all files)
5. Skip indexing for now
Choose option (1-5):
โ Saved preference: docs/
Scripts folders:
โ ๏ธ Found both script/ and scripts/ folders
Options:
1. Use scripts/ folder (skip script/)
2. Use script/ folder (skip scripts/)
3. Merge script/ โ scripts/ (move all files)
4. Merge scripts/ โ script/ (move all files)
5. Skip indexing for now
Choose option (1-5):
โ Saved preference: scripts/
.devibe/config.json)This ensures:
.devibe/config.jsondevibe or devibe statusShow repository status and suggested next actions.
devibe detectList all git repositories in the current directory.
devibe scanScan for hardcoded secrets (API keys, passwords, tokens).
Detects 31 types: AWS, Google, Azure, Stripe, GitHub, Slack, Discord, Anthropic, OpenAI, SendGrid, Twilio, Heroku, Firebase, NPM, Docker, Cloudflare, Datadog, and more. Plus JWT tokens, private keys, webhooks, and database credentials.
devibe planPlan root file distribution (shows what would be done).
devibe executeExecute planned file operations with automatic backup.
devibe execute --dry-run # Preview without making changes
devibe enforceEnforce folder structure (scripts/, documents/).
devibe validateDetect and validate build systems (Node.js, Docker, Python, Go).
devibe backupsList all available backups.
devibe restore <id>Restore from a backup.
devibe yolo or devibe --autoQuick auto-organize: Run full cleanup workflow automatically.
These commands are equivalent - use whichever you prefer!
What --auto does:
.gitignore to exclude .devibe/ directoriesPerfect for:
AI Key Handling:
devibe ai-key add <provider> <key> to configure AIdevibe ai-key reset-promptโ ๏ธ Note: This mode makes automatic changes but always creates backups first.
Quick commands:
devibe --auto # Quick auto-organize (same as yolo)
devibe yolo # Quick auto-organize (same as --auto)
devibe --auto --no-ai # Force heuristics only (skip AI prompt)
Advanced commands:
devibe plan --auto # Preview AI organization
devibe execute --auto # Execute AI organization
devibe execute --auto --no-ai # Execute with heuristics only
When to use:
devibe --auto or devibe yolo: Quick cleanup with AI (recommended)devibe --auto --no-ai: Fast cleanup without AI promptsdevibe plan --auto: Preview before executingdevibe initInitialize UnVibe configuration file.
devibe organize-testsOrganize test files by category (unit, integration, e2e, etc.).
devibe organize-tests # Move tests to organized directories
devibe organize-tests --dry-run # Preview changes
devibe organize-tests --report # Generate organization report
```0
### `devibe detect-tests`
List all test files and their categories.
### `devibe best-practices`
Analyze repository against industry best practices (40+ automated checks).
```bash
devibe best-practices # Run analysis
devibe best-practices --json # Output JSON for CI/CD
Checks include:
Scoring: Weighted 0-100 score with severity levels (critical, high, medium, low)
devibe validate-rulepackValidate a rule pack file against the specification.
devibe validate-rulepack my-pack.json
Provides clear, helpful error messages with:
$.metadata.name)devibe consolidateConsolidate markdown documentation using AI-powered semantic analysis.
# Preview consolidation (RECOMMENDED FIRST!)
devibe consolidate ./docs --dry-run
# Interactive consolidation
devibe consolidate ./docs -r
# Auto-consolidate with AI
devibe consolidate ./docs --auto -r --max-output 5
# Exclude patterns
devibe consolidate ./docs -r --exclude '**/archive/**' --exclude '**/old/**'
How it works:
DOCUMENTATION_HUB.md navigation hubConsolidation Strategies:
Relevance Scoring:
Safety Features:
--dry-run first to previewdevibe restoreOptions:
-r, --recursive - Process subdirectories--max-output <number> - Maximum consolidated files (default: 5)--dry-run - Preview without changes (RECOMMENDED)--auto - Auto-approve plan (use with caution)--exclude <pattern> - Exclude file patterns (repeatable)โ ๏ธ Important: Requires AI to be enabled. Run devibe ai-key add <provider> <key> first.
devibe consolidate:autoNEW in v2.0.0 Two powerful modes for markdown organization!
Consolidates all .md files into one, backs them up, and deletes originals. Perfect for cleaning up doc clutter.
# Default compress mode - consolidates and cleans up
devibe consolidate:auto
# Process all git boundaries recursively
devibe consolidate:auto --recursive-compress
# With options
devibe consolidate:auto --max-output 1 --suppress-toc
Workflow:
*.md files directly from root into one file.devibe/backups/Result:
Moves files to ./documents/ with AI organization. Perfect for archiving scattered docs.
# Archive mode - move and organize
devibe consolidate:auto --document-archive
# With options
devibe consolidate:auto --document-archive --max-output 3
Workflow:
*.md files from root โ ./documents/Result:
./documents/ folderGit-Aware:
--recursive-compress processes ALL boundaries recursivelySafety:
.devibe/backups/devibe restoreOptions:
--document-archive - Archive mode (preserves documents/ folder)--recursive-compress - Compress mode: process all git boundaries--no-include-related - Disable AI file analysis (enabled by default)--max-output <number> - Maximum output files (default: 1 compress, 5 archive)--suppress-toc - Suppress Table of Contents generation๐ค AI-Powered File Selection (ENABLED BY DEFAULT)
AI automatically decides which additional files (.txt, .log) should be included:
# Default behavior - AI analyzes related files automatically
devibe consolidate:auto
# Disable AI file selection if you don't want it
devibe consolidate:auto --no-include-related
What it does (automatically):
.txt, .log files in root directoryExample output:
โ COMMIT_MESSAGE.txt: detailed commit message with features
โ WEEK_4_SUMMARY.txt: project summary and accomplishments
โ PHASE_2_SUMMARY.txt: phase completion documentation
๐ AI Analysis: Including 8 related files
๐งน Cleaned up 12 backup artifact(s) from root
Use Cases:
๐ง AI Optional: Works with or without AI (uses smart fallback clustering)
Manage AI providers, keys, and cost optimization.
devibe ai-key add <provider> <key>Add an AI API key (encrypted with AES-256).
devibe ai-key add anthropic sk-ant-...
devibe ai-key add openai sk-...
devibe ai-key add google AIza...
devibe ai-key statusShow current AI configuration and cost recommendations.
devibe ai-key status
# Shows active provider, model, and potential savings
devibe ai-key clearRevert to environment variables (removes configured keys).
devibe ai-key clear
# Falls back to ANTHROPIC_API_KEY or OPENAI_API_KEY
devibe ai-analyzeCompare AI models and costs for your repository.
devibe ai-analyze # Analyze current directory
devibe ai-analyze -f 5000 # Analyze for 5000 files
Shows cost comparison across 7 AI models:
devibe ai-modelsList all available AI models with pricing and context windows.
devibe ai-models
DeVibe can automatically organize your tests into logical categories:
tests/
โโโ unit/ # Unit tests
โโโ integration/ # Integration tests
โโโ e2e/ # End-to-end tests
โโโ tdd/ # TDD specs
โโโ functional/ # Functional tests
โโโ performance/ # Performance tests
โโโ acceptance/ # Acceptance tests
โโโ contract/ # Contract tests
Supports 6 technologies:
.test.ts, .spec.ts).test.tsx, __tests__/)test_*.py, *_test.py)*_test.go)*Test.java, *IT.java)*Tests.cs, *Test.cs, xUnit/NUnit/MSTest)Share and reuse directory structure standards across projects and teams.
# Install official rule pack
devibe rulepack install @devibe/nodejs-standard
# Use in your project
devibe --rulepack @devibe/nodejs-standard
# Or in .devibe.config.js
module.exports = {
rulepacks: ['@devibe/nodejs-standard']
};
@devibe/nodejs-standard - Standard Node.js structure@devibe/react-standard - React/Next.js conventions@devibe/nodejs-monorepo - NX/Turborepo monorepo structure@devibe/python-standard - Python best practices@devibe/go-standard - Go standard project layoutCreate your own shareable standards:
# my-company-standard.yaml
schema: "devibe-rulepack/v1"
metadata:
name: "@mycompany/engineering-standard"
version: "1.0.0"
structure:
requiredFolders:
- path: "src"
- path: "tests"
- path: "docs"
testOrganization:
enabled: true
categories:
- name: "unit"
patterns: ["**/*.test.ts"]
targetDirectory: "tests/unit"
See RULE_PACK_SPEC.md for complete specification.
Create .unvibe.config.js in your repository root:
module.exports = {
secretScan: {
excludePatterns: ['node_modules/**', '.git/**'],
},
folderStructure: {
requiredFolders: ['scripts', 'documents'],
},
ai: {
enabled: false,
provider: 'anthropic', // or 'openai'
},
backup: {
enabled: true,
retentionDays: 30,
}
};
For better file classification (90% vs 65%):
export ANTHROPIC_API_KEY=your-key-here
# or
export OPENAI_API_KEY=your-key-here
UnVibe automatically detects AI availability and provides helpful recommendations when features are unavailable.
UnVibe provides smart, context-aware recommendations for common issues:
$ devibe validate
โ nodejs: PASSED (0ms)
โ ๏ธ No build script found in package.json
Skipping build validation (not blocking)
To enable: Add "build": "tsc" or your build command to package.json scripts
$ devibe validate
โ nodejs: FAILED (499ms)
๐ก Build failed. Possible fixes:
โข Run "npm install" to ensure dependencies are installed
โข Check for TypeScript errors if using tsc
โข Review build script in package.json
โข Run "npm run build" manually to see full error
$ devibe plan
โ ๏ธ AI classification unavailable - using heuristics (65% accuracy)
For better results: Set ANTHROPIC_API_KEY or OPENAI_API_KEY
$ devibe status
๐ UnVibe Status
AI Classification:
โ ๏ธ AI unavailable - using heuristics (65% accuracy)
To enable: Set ANTHROPIC_API_KEY or OPENAI_API_KEY environment variable
Build Configuration:
โ ๏ธ No build script found
To enable validation: Add "build" script to package.json
The app never blocks on missing optional features - it provides helpful guidance while continuing to work.
UnVibe integrates with GitHub to keep your main branch clean:
# Setup git hooks (auto-runs on push)
devibe setup-hooks
# Check before pushing
devibe check-pr
Features:
See GITHUB-INTEGRATION.md for full guide.
All comprehensive documentation has been organized into the documents/ directory:
๐ View Full Documentation Index โ
AI & Setup:
Architecture:
Reference:
๐ก Tip: The documents/ folder contains 20+ guides. Check documents/README.md for the complete organized index.
npm install
npm test
npm run build
ISC License
UnVibe - Because every vibe coding session deserves a clean ending. ๐
Made with Claude Code
FAQs
Intelligent repository cleanup with auto mode, AI learning, markdown consolidation, auto-consolidate workflow, context-aware classification, and cost optimization
The npm package devibe receives a total of 4 weekly downloads. As such, devibe popularity was classified as not popular.
We found that devibe demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.ย It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.