
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Automated session analysis for Claude Code — detect frictions, suggest improvements
Automated session analysis for Claude Code — detect frictions, suggest improvements, close the feedback loop.
Every time you close a Claude Code session, fbl analyzes the transcript, detects recurring frictions, and suggests actionable rules to add to your CLAUDE.md. It learns from your mistakes so you don't repeat them.
Privacy-first: Your code and transcripts never leave your machine. Only anonymized friction patterns are shared (opt-in).
Model-agnostic: Works with Anthropic (Haiku/Sonnet), OpenRouter (100+ models), or fully local via Ollama.
npm i -g fbl-ai # Install globally
fbl init # Configure provider + install hook
fbl analyze --last 7d # Analyze past sessions (instant value)
fbl report # See frictions + suggestions
fbl apply 1 # Apply suggestion #1 to CLAUDE.md
Claude Code session ends
│
▼
SessionEnd hook triggers (async, < 100ms)
│
▼
Background worker reads transcript JSONL
│
▼
LLM analyzes for frictions & suggestions
│
▼
Results stored locally (~/.fbl/)
│
▼
`fbl report` shows insights
│
▼
`fbl apply` edits CLAUDE.md via Claude Code headless
analyze --last 30d to get value from day oneapply <n> uses Claude Code headless to edit CLAUDE.md intelligently| Command | Description |
|---|---|
fbl init | Interactive setup wizard |
fbl analyze --last <duration> | Analyze past sessions |
fbl report [--last <duration>] | Show friction report + suggestions |
fbl apply <n> | Apply suggestion using Claude Code |
fbl history [--last <duration>] | Timeline of past analyses |
fbl config [--show|--provider|--telemetry] | View/update configuration |
fbl gain | Show token savings analytics |
Config is stored in ~/.fbl/config.json. Use fbl config to modify.
| Provider | Pros | Cons | Default model |
|---|---|---|---|
| Anthropic | Fast, accurate | API key needed | claude-haiku-4-5 |
| OpenRouter | 100+ models, cheap | API key needed | llama-3.1-8b |
| Local (Ollama) | Free, private | Slower, less accurate | llama3.1:8b |
When opted-in, fbl sends anonymized friction patterns (types, categories, severity counts) to improve community recommendations. Never sent: code, transcripts, file paths, descriptions, or rules.
Disable anytime: fbl config --telemetry off
| What stays local | What's shared (opt-in only) |
|---|---|
| Source code | Friction types & categories |
| Transcripts | Severity counts |
| File paths | Suggestion targets |
| Descriptions & rules | Satisfaction signals |
| CLAUDE.md content | Hashed device ID |
FSL-1.1-MIT — Free to use, will become MIT on 2028-03-22.
Contributions welcome! Please open an issue first to discuss changes.
FAQs
Automated session analysis for Claude Code — detect frictions, suggest improvements
We found that fbl-ai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.