
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
diff-detective
Advanced tools
Diff Detective is an AI-powered git commit review tool that helps catch issues before they're pushed to the repository.
To provide an automated review of staged changes in a git repository. it aims to:
To install:
pnpm install -g diff-detective
The default model is Sonnet 3.5 from Anthropic.
For each provider you use, you need an API key. You can set it
your-api-key)your-api-key)To use Diff Detective, simply run detective or dd (because we are lazy) in the root of your project.
This will analyze your currently staged changes and provide a detailed report.
Example parameter usage:
detective --model gpt-4o --prompt-path "./my-custom-review-prompt.txt"
dd --prompt "See any issues in the database refactor?" -m "o1-mini" --ignore pnpm-lock.yaml dist/
Example of setting defaults:
detective set-provider anthropic
detective set-model claude-3-5-sonnet-20240620
detective set-api-key "your-api-key"
detective set-ignored-files dist/ pnpm-lock.yaml android/ ios/
detective get-config
detective clear-config
To see all available options, run
detective --help
Diff Detective currently supports OpenAi, Anthropic and OpenRouter as providers. You can use any model available with these providers (given you have an API key). More to come.
Diff Detective integrates into your git workflow as follows:
git addFAQs
AI-powered git commit review tool
The npm package diff-detective receives a total of 13 weekly downloads. As such, diff-detective popularity was classified as not popular.
We found that diff-detective demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.