
Research
/Security News
Toptal’s GitHub Organization Hijacked: 10 Malicious Packages Published
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Advanced file scanner designed to enrich language models (such as GPT or similar) with comprehensive project context by extracting, organizing, and contextualizing project files
vmvv is an advanced file scanner designed to enrich language models (such as GPT or similar) with comprehensive project context by extracting, organizing, and contextualizing project files. By providing structured insights, vmvv enables language models to generate more accurate, insightful, and relevant outputs tailored to the unique setup of each project.
package.json
.env
Filevmvv scans all files and directories within a project, identifying and parsing key information to construct a clear and detailed context for language models. This facilitates the language model’s understanding of the project's architecture, dependencies, and workflows, enhancing the precision and relevance of the responses it generates.
Enhanced Code Assistance
Scenario: A developer needs assistance refactoring a large codebase with multiple dependencies and complex configurations.
Solution: By using vmvv to scan the project, a language model can understand the entire codebase structure, making recommendations that respect existing dependencies and configurations, thus improving code quality and coherence.
Automated Documentation
Scenario: The team wants to automate the documentation process for a newly developed API.
Solution: vmvv scans through relevant project files, such as code and configuration files, to provide the language model with the necessary context for generating accurate, project-specific documentation.
Dependency Management and Troubleshooting
Scenario: A developer encounters compatibility issues within a multi-module project.
Solution: vmvv scans and organizes dependency files and configurations, allowing the language model to identify and troubleshoot compatibility issues based on the overall project setup.
Architecture Analysis and Insights
Scenario: A system architect is analyzing a legacy project to propose improvements.
Solution: vmvv provides the language model with a detailed view of the project’s architecture, dependencies, and modules, enabling it to suggest potential architectural improvements with a holistic understanding of the system.
Cross-Project Context Sharing
Scenario: A consultant is working across several projects and needs to compare code structures and setups.
Solution: vmvv scans each project individually, allowing the language model to access and compare structured data from multiple projects, facilitating insights on best practices and architectural consistencies.
vmvv is ideal for development teams, technical writers, consultants, and anyone looking to leverage language models for enhanced project insights, documentation, and troubleshooting. It is a powerful tool for creating a bridge between raw project data and meaningful, context-aware model outputs.
To install the package from NPM, run the following command:
npm install vmvv
package.json
To add a script for scanning your project, edit your package.json
file and add the following entry:
{
"scripts": {
"scan": "node node_modules/vmvv/lib/project_files.js"
}
}
After installing the package and adding the script, you can scan your project by running:
npm run scan
When you run the scan command, you will be prompted to choose between two options:
🔍 Please select the scan type:
📄 Scan and generate JSON
📃 Scan and generate TXT
📁 Scan a specific directory
🚪 Exit
To tailor the scanning process to your project's specific needs, you can exclude certain files or directories. This is particularly useful to prevent the scanner from processing unnecessary or sensitive files, or to avoid re-scanning files generated by the scanner itself.
.env
File:The .env
file is located in the root directory of your project. If it does not exist, it will be created automatically when you run the scanner.
The EXCLUDE_FILES
variable allows you to specify patterns for files you want to exclude from the scan. You can use exact filenames or wildcard patterns.
EXCLUDE_FILES=package-lock.json,yarn.lock,.env,.env.example,project_files.json,project_files.txt,project_files_*.json,project_files_*.txt,*.json,*.txt,.DS_Store
package-lock.json
, yarn.lock
, .env
, .env.example
project_files.json
, project_files.txt
project_files_*.json
(excludes any JSON file starting with project_files_
)project_files_*.txt
(excludes any TXT file starting with project_files_
)*.json
(excludes all JSON files)*.txt
(excludes all TXT files).DS_Store
(a common macOS metadata file).env
File:After adding your exclusion patterns, save the .env
file. The scanner will automatically use these patterns in subsequent scans.
.env
File:As with file exclusions, the .env
file is your configuration hub.
The EXCLUDE_DIRS
variable allows you to specify directories to exclude.
EXCLUDE_DIRS=node_modules,.git,.vscode,dist,build,.nuxt,public
node_modules
(dependencies).git
(Git repository).vscode
(Visual Studio Code settings)dist
, build
(build directories).nuxt
, public
(framework-specific directories).env
File:After specifying the directories to exclude, save the .env
file. The scanner will respect these exclusions in future scans.
*
) in file exclusions, allowing for flexible and broad exclusion criteria.Project_Files_*.json
and project_files_*.json
are treated the same..env
File:EXCLUDE_DIRS=node_modules,.git,.vscode,dist,build,.nuxt,public
EXCLUDE_FILES=package-lock.json,yarn.lock,.env,.env.example,project_files.json,project_files.txt,project_files_*.json,project_files_*.txt,*.json,*.txt,.DS_Store
PROJECT_DESCRIPTION=This is a project description
MAIN_TECHNOLOGIES=node.js
New (ver 2.7.1):
The console indicates the number of tokens once the scan is performed
Number of tokens in the generated file: 3623
After generating the report (either JSON or TXT), you can copy its content and use the OpenAI Tokenizer to count the tokens. This can help ensure that the project context fits within the token limits of your chosen language model.
FAQs
Advanced file scanner designed to enrich language models (such as GPT or similar) with comprehensive project context by extracting, organizing, and contextualizing project files
The npm package vmvv receives a total of 3 weekly downloads. As such, vmvv popularity was classified as not popular.
We found that vmvv demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Threat actors hijacked Toptal’s GitHub org, publishing npm packages with malicious payloads that steal tokens and attempt to wipe victim systems.
Research
/Security News
Socket researchers investigate 4 malicious npm and PyPI packages with 56,000+ downloads that install surveillance malware.
Security News
The ongoing npm phishing campaign escalates as attackers hijack the popular 'is' package, embedding malware in multiple versions.