
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
Sip your tokens, don't gulp them. Keep Claude Code's context clean: drift detection, re-read dedup, integrity scoring, AST-aware reads, and 15 MCP tools for Claude Desktop.
Keep Claude Code's context clean for sharper answers and lower cost, automatically.
npm i -g sipcode
sipcode init
That is it. Your next Claude Code session will use Sipcode automatically. Verify a few minutes later:
sipcode drift
If the output reads no drift, context health stable, Sipcode is doing its job.
Sipcode is a free command-line tool that sits between you and Claude Code. It does three things:
It is open source under the MIT license. It makes zero network calls during normal use. Your data never leaves your laptop.
| Sipcode | Tool A | Tool B | Tool C | |
|---|---|---|---|---|
| Approach | Live PreToolUse hook | Cross-session memory store | Static methodology | RAG retrieval server |
| Caps verbose tool output | ✓ | ✗ | docs only | ✗ |
| Dedups same-session re-reads | ✓ | ✗ | docs only | ✗ |
| Mid-session install support | ✓ Verified Warm-Fill | n/a | n/a | n/a |
| Zero false-dedup by construction | ✓ | n/a | n/a | n/a |
| Reproducible benchmark on locked corpus | ✓ 62.6% median (20 tasks) | ✗ | ✗ | ✗ |
| Self-introspection MCP tools | ✓ 15 tools | ✗ | ✗ | partial |
| Zero network calls in normal use | ✓ | ✓ | n/a | ✗ |
| MIT licensed | ✓ | ✓ | ✓ | ✓ |
Sipcode is complementary to memory tools that persist context across sessions (Tool A in the table). Sipcode keeps each individual session clean. They solve different problems. Run both for maximum effect.
Full feature-by-feature comparison with tool names revealed: anuj7411.github.io/sipcode/compare
If you use Claude Code for real work, you have already felt this:
Sipcode measures the bloat, then removes the parts Claude does not need. The savings are not theoretical. Run sipcode benchmark on any machine and you will see the same 62.6% median reduction on the locked 20-task corpus.
After installing, here are the five commands that show you what Sipcode is doing.
sipcode driftTells you if your current Claude Code session is drifting from your normal usage pattern. Bloated context, repeated reads, stale signals are all flagged here.
✓ Sipcode drift: no drift, context health stable vs your recent baseline.
sipcode proxy --statsShows what Sipcode caught in the current session, broken down by rewriter.
Sipcode proxy, rewrite stats
total rewrites: 144
est. tokens saved: ~288,685 (heuristic)
signal kept: 67% (med), weighted across all rewrites
sipcode benchmarkRuns the locked 20-task corpus and produces a verifiable savings number. Anyone, anywhere can run this and get 62.6%.
62.6% median savings on a locked 20-task corpus
range 37.4% to 80.6% 3,567,170 tokens $67.43
sipcode todayDaily spend summary. Tokens used, sessions, output ratio, comparison to your 30-day median.
spend so far $1.20 across 4 sessions
tokens so far 943.8K output ratio 3.7%
sipcode forecastMonth-end projection based on your last 14 days.
projected month-end $17,674 (range $14,139 to $21,208)
Sipcode works on Mac, Linux, and Windows. You need Node.js 18 or newer.
Skip this step if you already have Node.js. Otherwise:
brew install nodesudo apt install nodejs npmVerify it worked:
node --version
You should see v18.0.0 or higher.
npm i -g sipcode
This downloads Sipcode from npm and makes the sipcode command available everywhere.
If you see permission errors on Mac or Linux, try:
sudo npm i -g sipcode
Verify it installed:
sipcode --version
You should see 1.6.15 or higher.
sipcode init to wire it into Claude Codesipcode init
This command does four things:
.sipcode/manifest.md file in your current project so Claude knows what your project is aboutCLAUDE.md (or creates one) with rules that keep Claude's replies tersesipcode impact can show you before-and-after savings laterYou will see a checklist as it runs. Each step shows a checkmark when it completes.
Sipcode picks up automatically on the next tool call Claude makes. No restart needed in most cases. To be safe, you can close any existing Claude Code window and open a fresh one.
Now Claude Code will be using Sipcode in the background.
sipcode drift
sipcode proxy --stats
If drift says "no drift" and proxy --stats shows a few dozen rewrites with savings, everything is working.
Sipcode never checks for updates on its own. That would require a network call, and zero network calls in normal use is a guaranteed property of the codebase (a test fails the build otherwise). Updating is always a manual, explicit step.
To update to the latest version:
npm i -g sipcode@latest
Or use the built-in helper:
sipcode update # prints your current version + the update command
sipcode update --run # runs the update in place for you
After updating, confirm with sipcode --version and see what changed in the CHANGELOG. The MCP config never needs re-pasting; Claude asks the server for its tools on every reconnect, so new tools appear automatically.
Release cadence: patch releases ship whenever a fix or improvement is ready, often within a day or two of a reported issue. Watch or star the repo to be notified of new releases.
| Feature | What it does for you |
|---|---|
| Context-rot detection | Warns when your Claude Code session is starting to behave worse than your norm |
| Re-read deduplication | Catches duplicate file reads and skips them, saving tokens and time |
| Compression-integrity scoring | For every saving, tells you what percentage of the original signal was kept |
| Spend telemetry | Daily, monthly, projected. All from your own transcripts, no cloud upload |
| MCP server | 15 tools registered for Claude Desktop, so you can ask Claude itself about your usage |
| Reproducible benchmark | A locked 20-task corpus that anyone can run and verify |
Yes. MIT license. No tracking. No telemetry sent to us. No paid tier. You can read every line of source code on GitHub.
No. Sipcode makes zero network calls during normal use. Everything runs locally on your machine. We have a privacy test that fails if any network code is imported into the source.
See the comparison page. The short version: Sipcode is the only one with a published reproducible benchmark, zero false-dedup by architecture, and mid-session install support.
When Claude's context window fills up with stale, repeated, or off-topic information, the quality of its answers drops. Sipcode measures this with sipcode drift and removes most of the waste with the proxy hook.
Today, only with Claude Code (since Claude Code is the only tool that exposes the hooks Sipcode needs). Support for other CLIs is something we are exploring.
npm i -g sipcode@latest
Or run sipcode update to see your version and the command, or sipcode update --run to update in place. Sipcode never auto-checks for updates (zero network calls), so updating is always explicit. See the CHANGELOG for what changed.
sipcode proxy --uninstall
npm uninstall -g sipcode
| Command | What it does |
|---|---|
sipcode init | Set up Sipcode in a project (manifest + CLAUDE.md + proxy hook) |
sipcode update | Show how to update to the latest version (or --run to update now) |
sipcode drift | Check if the current session is drifting from your norm |
sipcode proxy --stats | See what the proxy caught this session |
sipcode benchmark | Run the locked 20-task corpus |
sipcode today | Today's spend summary |
sipcode forecast | Month-end spend projection |
sipcode impact | Before vs after Sipcode comparison |
sipcode why | Per-session forensics |
sipcode score | Audit your repo for AI-friendliness |
sipcode receipt | Generate a shareable PDF receipt of a session |
Run any of them with --help for full options.
MIT. See LICENSE.
Built with care for the indie developers who burn through their Claude Max plan in two hours. The 62.6% benchmark methodology is documented in benchmark/METHODOLOGY.md. Anthropic's published research on context-window quality informs the integrity-scoring approach.
FAQs
Sip your tokens, don't gulp them. Keep Claude Code's context clean: drift detection, re-read dedup, integrity scoring, AST-aware reads, and 15 MCP tools for Claude Desktop.
The npm package sipcode receives a total of 49 weekly downloads. As such, sipcode popularity was classified as not popular.
We found that sipcode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.