New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details → →
github-brain
Advanced tools
github-brain - npm Package Compare versions
+6
-6
| { | ||
| "name": "github-brain", | ||
| "version": "1.9.0", | ||
| "version": "1.10.0", | ||
| "description": "MCP server for searching GitHub discussions, issues, and pull requests", | ||
@@ -26,7 +26,7 @@ "bin": { | ||
| "optionalDependencies": { | ||
| "github-brain-darwin-arm64": "1.9.0", | ||
| "github-brain-darwin-x64": "1.9.0", | ||
| "github-brain-linux-arm64": "1.9.0", | ||
| "github-brain-linux-x64": "1.9.0", | ||
| "github-brain-windows": "1.9.0" | ||
| "github-brain-darwin-arm64": "1.10.0", | ||
| "github-brain-darwin-x64": "1.10.0", | ||
| "github-brain-linux-arm64": "1.10.0", | ||
| "github-brain-linux-x64": "1.10.0", | ||
| "github-brain-windows": "1.10.0" | ||
| }, | ||
@@ -33,0 +33,0 @@ "files": [ |
+13
-59
@@ -34,15 +34,13 @@ <div align="center"> | ||
| ```sh | ||
| github-brain <command> [<args>] | ||
| github-brain | ||
| ``` | ||
| **Workflow:** | ||
| Launches the interactive TUI where you can: | ||
| 1. Use `login` to authenticate with GitHub (or set `GITHUB_TOKEN` manually) | ||
| 2. Use `pull` to populate the local database | ||
| 3. Use `mcp` to start the MCP server | ||
| 1. **Login** - Authenticate with GitHub | ||
| 2. **Pull** - Populate the local database with GitHub data | ||
| Re-run `pull` anytime to update the database with new GitHub data. | ||
| Re-run pull anytime to update the database with new GitHub data. | ||
| Each command has its own arguments. Some can be set via environment variables. The app will also load environment variables from a `.env` file in the GitHub Brain's home directory - `~/.github-brain` by default. | ||
| You can change the home directory with the `-m` argument available for all commands. | ||
| The app loads environment variables from a `.env` file in the GitHub Brain's home directory - `~/.github-brain` by default. | ||
@@ -57,13 +55,2 @@ <details> | ||
| ### `login` | ||
| Opens your browser to authorize _GitHub Brain_ app and stores resulting `GITHUB_TOKEN` in the `.env` file. | ||
| Optionally, you can also specify `ORGANIZATION` to store in the same file. | ||
| Example: | ||
| ```sh | ||
| github-brain login | ||
| ``` | ||
| | Argument | Description | | ||
@@ -73,23 +60,2 @@ | :------- | :----------------------------------------- | | ||
| ### `pull` | ||
| Populate the local database with GitHub data. | ||
| Example: | ||
| ```sh | ||
| github-brain pull -o my-org | ||
| ``` | ||
| The first run may take a while. Subsequent runs are faster, fetching only new data. | ||
| | Argument | Variable | Description | | ||
| | :------- | :---------------------- | :------------------------------------------------------------------------------------------------------------------------------------- | | ||
| | | `GITHUB_TOKEN` | Your GitHub token. Use `login` command or create a [personal token](https://github.com/settings/personal-access-tokens). **Required.** | | ||
| | `-o` | `ORGANIZATION` | The GitHub organization to pull data from. **Required.** | | ||
| | `-m` | | Home directory. Default: `~/.github-brain` | | ||
| | `-i` | | Pull only selected entities: `repositories`, `discussions`, `issues`, `pull-requests` (comma-separated). | | ||
| | `-f` | | Remove all data before pulling. With `-i`, removes only specified items. | | ||
| | `-e` | `EXCLUDED_REPOSITORIES` | Repositories to exclude (comma-separated). Useful for large repos not relevant to your analysis. | | ||
| <details> | ||
@@ -106,27 +72,15 @@ <summary>Personal access token scopes</summary> | ||
| ### `mcp` | ||
| ## MCP Server | ||
| Start the MCP server using the local database. | ||
| Start the MCP server using the local database: | ||
| Example: | ||
| ```sh | ||
| github-brain mcp -o my-org | ||
| github-brain mcp | ||
| ``` | ||
| | Argument | Variable | Description | | ||
| | :------- | :------------- | :------------------------------------------ | | ||
| | `-o` | `ORGANIZATION` | GitHub organization. **Required.** | | ||
| | `-m` | | Home directory. Default: `~/.github-brain` | | ||
| | Argument | Variable | Description | | ||
| | :------- | :------------- | :----------------------------------------- | | ||
| | `-o` | `ORGANIZATION` | GitHub organization. **Required.** | | ||
| | `-m` | | Home directory. Default: `~/.github-brain` | | ||
| ### Additional Arguments | ||
| **Version:** | ||
| ```sh | ||
| github-brain --version | ||
| ``` | ||
| Displays the current version (commit hash and build date). | ||
| ## MCP Configuration | ||
@@ -133,0 +87,0 @@ |
New alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Fixed alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Worsened metrics
- Total package byte prevSize
7940
-22.51%- Number of lines in readme file
123
-27.22%No dependency changes