
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
Local-first CLI that indexes your AI coding sessions. Search locally, enhance with AI, and publish a portfolio of real work.
Discovers sessions from Claude Code, Cursor, OpenAI Codex CLI, and Google Gemini CLI.
npx heyiam
Opens a local dashboard at localhost:17845. Browse projects, search sessions, and publish portfolio case studies to heyi.am/:username.
| Command | Description |
|---|---|
heyiam / heyiam open | Start local dashboard |
heyiam search [query] | Full-text search across all sessions |
heyiam time | Your time vs agent time per project |
heyiam context <id> | Export session as compressed context for AI tools |
heyiam archive | Discover and archive sessions from all sources |
heyiam sync | Index sessions into SQLite |
heyiam status | Archive health, session counts, daemon status |
Everything stays local by default. Nothing leaves your machine unless you explicitly publish.
~/.local/share/heyiam/~/.config/heyiam/AI enhancement runs locally using your own ANTHROPIC_API_KEY.
FAQs
Turn AI coding sessions into portfolio case studies
We found that heyiam demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.