
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
Easily add instructions, cheat sheets and rules for your favorite tools tailored for your framework.
This project is still under development. This README represents the idea of the project. Feel free to give me feedback or contribute to the project.
Easily add instructions, cheat sheets and rules for your favorite tools tailored for your framework to use with your agentic IDE. (DX inspired by shadcn/ui)
npx vibestack init
(Also works with bunx or pnpm dlx)
npx vibestack add
Then answer the CLI for the category and the tool name. The files will be added to the ./vibes directory. Now you can just link it to the AI agent's context and you're good to go.
npx vibestack add: Add a new toolnpx vibestack add {category}: Select a tool from a specific categorynpx vibestack add {category} {tool}: Add a specific toolYou can use an external URL to add a tool.
npx vibestack add https://example.com/tool.md
The CLI will download the file and add it to the project.
FAQs
Easily add instructions, cheat sheets and rules for your favorite tools tailored for your framework.
The npm package vibestack receives a total of 27 weekly downloads. As such, vibestack popularity was classified as not popular.
We found that vibestack demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.