
Security News
The Code You Didn't Write Is Still Yours to Defend
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.
Turn any project into a tmux-powered terminal IDE with a simple ide.yml config file.
npm install -g tmux-ide
Global install also registers the bundled Claude Code skill and enables CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1 in ~/.claude/settings.json if Claude Code is installed locally on the machine.
tmux-ide init # Scaffold ide.yml (auto-detects your stack)
tmux-ide # Launch the IDE
tmux-ide stop # Kill the session
tmux-ide restart # Stop and relaunch
tmux-ide attach # Reattach to a running session
tmux-ide inspect # Inspect effective config + runtime state
name: project-name # tmux session name
before: pnpm install # optional pre-launch hook
rows:
- size: 70% # row height percentage
panes:
- title: Editor # pane border label
command: vim # command to run (optional)
size: 60% # pane width percentage (optional)
dir: apps/web # per-pane working directory (optional)
focus: true # initial focus (optional)
env: # environment variables (optional)
PORT: 3000
- title: Shell
- panes:
- title: Dev Server
command: pnpm dev
- title: Tests
command: pnpm test
theme: # optional color overrides
accent: colour75
border: colour238
bg: colour235
fg: colour248
| Command | Description |
|---|---|
tmux-ide | Launch IDE from ide.yml |
tmux-ide <path> | Launch from a specific directory |
tmux-ide init [--template <name>] | Scaffold a new ide.yml |
tmux-ide stop | Kill the current IDE session |
tmux-ide restart | Stop and relaunch the IDE session |
tmux-ide attach | Reattach to a running session |
tmux-ide ls | List all tmux sessions |
tmux-ide status | Show session status |
tmux-ide inspect | Show effective config and runtime state |
tmux-ide doctor | Check system requirements |
tmux-ide validate | Validate ide.yml |
tmux-ide detect | Detect project stack and explain why |
tmux-ide detect --write | Detect and write ide.yml |
tmux-ide config | Dump config as JSON |
tmux-ide config set <path> <value> | Set a config value |
tmux-ide config add-pane --row <N> | Add a pane to a row |
tmux-ide config remove-pane --row <N> --pane <M> | Remove a pane |
tmux-ide config add-row [--size <percent>] | Add a new row |
tmux-ide config enable-team --name <name> | Enable agent teams |
tmux-ide config disable-team | Disable agent teams |
All commands support --json for structured output.
tmux-ide detect now includes reasoning about the package manager, language, framework, and dev-command signals it used. tmux-ide inspect combines config validation, resolved layout details, and live tmux state in one command.
Use tmux-ide init --template <name> with one of:
default - General-purpose layoutnextjs - Next.js developmentconvex - Convex + Next.jsvite - Vite projectpython - Python developmentgo - Go developmentagent-team - Agent team with lead + teammatesagent-team-nextjs - Agent team for Next.jsagent-team-monorepo - Agent team for monoreposThe repo now uses a pnpm workspace with a root CLI package and a separate docs app package:
pnpm install
pnpm test
pnpm docs:build
pnpm check
pnpm pack:check
pnpm check is the intended local pre-push command and matches the default release checklist. npm publish is still guarded by prepublishOnly, so publishing runs the same full check path automatically.
GitHub Actions validates:
npm pack --dry-runThat keeps the release surface small but catches the main regressions for a CLI-first package.
Release note convention:
Unreleased heading in CHANGELOG.md until the tag is cut.FAQs
Turn any project into a tmux-powered terminal IDE with a simple ide.yml
We found that tmux-ide demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.