
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
superaiflow
Advanced tools
智能AI工作流增强框架 - 专业化角色系统和动态提示词优化
npm install -g superaiflow
# 查看帮助
superaiflow --help
# 或者使用短命令
saf --help
# 迁移现有配置
superaiflow migrate
# 使用特定角色
superaiflow --persona architect "设计一个微服务架构"
npm install superaiflow
import { PromptEnhancer, PersonaManager } from 'superaiflow';
const enhancer = new PromptEnhancer();
const result = await enhancer.enhance(
"帮我优化这个React组件",
"claude-3-opus",
{ persona: 'frontend' }
);
superaiflow/
├── src/
│ ├── core/ # 核心功能
│ ├── types/ # 类型定义
│ ├── adapters/ # 适配器
│ └── commands/ # CLI命令
├── templates/ # 模板文件
└── dist/ # 编译输出
# 克隆项目
git clone https://github.com/superaiflow/superaiflow.git
# 安装依赖
npm install
# 开发模式
npm run dev
# 构建
npm run build
MIT License
欢迎提交 Issue 和 Pull Request!
FAQs
智能AI工作流增强框架 - 专业化角色系统和动态提示词优化
We found that superaiflow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.