
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
CLI to automatically generate Pull Request descriptions using Ollama with local AI.
{branch_name}_pr.md filenpm install -g mkpr-cli
# Clone the repository
git clone https://github.com/yourusername/mkpr-cli.git
cd mkpr-cli
# Install globally
npm install -g .
npx mkpr-cli
ollama pull llama3.2)# While on your feature branch
mkpr
# Compare against a different base branch (this run only)
mkpr -b develop
# Save to a specific directory (this run only)
mkpr -o ./docs/prs
# Only view the description without saving file
mkpr --dry-run
# Combine options
mkpr -b develop -o ./prs --dry-run
# View current configuration
mkpr --show-config
# Change Ollama model (interactive selector)
mkpr --set-model
# Change Ollama model (direct)
mkpr --set-model llama3.1
# Change Ollama port
mkpr --set-port 11434
# Change default base branch
mkpr --set-base develop
# Change default output directory
mkpr --set-output ./docs/prs
# List available models
mkpr --list-models
# View help
mkpr --help
# List excluded files
mkpr --list-excludes
# Add file to exclusion list
mkpr --add-exclude "*.generated.js"
# Remove file from exclusion list
mkpr --remove-exclude "package-lock.json"
# Reset exclusion list to defaults
mkpr --reset-excludes
git checkout -b feature/new-functionalitymkprgit fetch origin to updateorigin/main (or configured branch)The generated file feature_new-functionality_pr.md will contain:
# Add user authentication system
**Type:** ✨ `feature`
**Branch:** `feature/add-user-auth` → `origin/main`
## Description
This PR implements a complete user authentication system with JWT tokens...
## Changes
- Add AuthService with JWT token generation
- Implement login and registration endpoints
- Create token validation middleware
- Update route configuration
## Stats
- **Commits:** 5
- **Files changed:** 12
- **Files added:** 4
- **Files modified:** 8
## Checklist
- [ ] Code follows project standards
- [ ] Tests have been added (if applicable)
- [ ] Documentation has been updated (if applicable)
- [ ] Changes have been tested locally
$ mkpr
🔍 Analyzing differences with base branch...
✔ Repository updated
📌 Current branch: feature/add-user-auth
📌 Base branch: origin/main
📝 Commits: 5
📁 Files: 12
📁 Modified files:
[A] src/auth/AuthService.js
[A] src/auth/AuthController.js
[M] src/routes/index.js
[M] package.json
... and 8 more files
⠋ Generating description with llama3.2...
✔ Description generated
📝 Proposed PR description:
────────────────────────────────────────────────────────────
# Add user authentication system
...
────────────────────────────────────────────────────────────
? What would you like to do? (Use arrow keys)
❯ ✅ Accept and save file
🔄 Generate another description
✏️ Edit title manually
──────────────
🤖 Change model
──────────────
❌ Cancel
✔ File saved: ./feature_add-user-auth_pr.md
💡 Tip: You can copy the file content for your PR.
| Option | Default value |
|---|---|
| Port | 11434 |
| Model | llama3.2 |
| Base branch | main |
| Output directory | . (current directory) |
The following files are excluded from analysis by default:
package-lock.json, yarn.lock, pnpm-lock.yamlcomposer.lock, Gemfile.lock, poetry.lockCargo.lock, pubspec.lock, packages.lock.json*.min.js, *.min.css)dist/*, build/*, .next/*)*.map)--dry-run to preview without creating filesdevelop as base branch, use mkpr --set-base develop once--set-model without arguments to interactively select a modelnpm update -g mkpr-cli
npm uninstall -g mkpr-cli
MIT
FAQs
CLI para generar descripciones de PR usando Ollama AI
We found that mkpr-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.