
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
opencode-breadcrumb
Advanced tools
OpenCode plugin that displays timestamp, session duration, and git context on each prompt
OpenCode plugin that displays timestamp, session duration, and git context on each prompt.
🕐 01-14 18:30 (+2m15s) ⏱️1h23m * │ ⎇ main ↑2↓1 wt:feature(2) │ ✎3 +5 │ "Last commit msg" 2h
| Symbol | Example | Description |
|---|---|---|
| 🕐 | 🕐 01-14 18:30 | Current date (MM-DD) and time (HH:MM) |
| (+...) | (+2m15s) | Time elapsed since last prompt |
| ⏱️ | ⏱️1h23m | Total session duration |
| * | * | 30-minute checkpoint marker (appears every 30 min) |
| Symbol | Example | Description |
|---|---|---|
| ⎇ | ⎇ main | Current git branch |
| ↑ | ↑2 | Commits ahead of upstream |
| ↓ | ↓1 | Commits behind upstream |
| wt: | wt:feature(2) | Worktree name and total worktree count |
| ✎ | ✎3 | Number of modified files |
| + | +5 | Number of untracked files |
| "..." | "Last commit msg" 2h | Last commit message (truncated) and age |
| Symbol | Description |
|---|---|
| │ | Separates major sections |
| ⊘ | Shown when not in a git repository |
On the first prompt of a session:
(+0s)⏱️0s* marker is skippednpm install opencode-breadcrumb
Add to your ~/.config/opencode/opencode.json:
{
"plugin": ["opencode-breadcrumb"]
}
Then restart OpenCode.
Clone the repo and link it locally:
git clone https://github.com/keybrdist/opencode-breadcrumb.git
cd opencode-breadcrumb
npm link
Then in your OpenCode config directory:
cd ~/.config/opencode/node_modules
npm link opencode-breadcrumb
Or copy directly to node_modules:
cp -r opencode-breadcrumb ~/.config/opencode/node_modules/
Add to ~/.config/opencode/opencode.json:
{
"plugin": ["opencode-breadcrumb"]
}
Restart OpenCode to load the plugin.
State is stored in ~/.config/opencode/breadcrumb/:
| File | Purpose |
|---|---|
last_prompt_ts | Timestamp of last prompt (for delta calculation) |
last_interval_ts | Timestamp of last 30-min marker |
session_start_ts | Session start time |
To reset session tracking:
rm -rf ~/.config/opencode/breadcrumb/
Plugin not loading?
opencode-breadcrumb is listed in the plugin array in opencode.jsonGit info not showing?
⊘ no git when not in a repoSession timer keeps resetting?
~/.config/opencode/breadcrumb/MIT
FAQs
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.