
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
ZLocalz - TUI Locale Guardian for Flutter ARB l10n/i18n validation and translation with AI-powered fixes
A powerful Terminal User Interface (TUI) application for managing Flutter localization files in multiple formats. ZLocalz supports ARB, JSON, YAML, CSV, and TSV files, ensuring perfect synchronization between your source locale and target translations with automatic validation, fixing, and AI-powered translation capabilities.
Repository: github.com/bllfoad/zlocalz
⚠️ Beta: ZLocalz is currently in beta and may have issues. If you run into problems, please open an issue via the CLI with
zlocalz issue --newor visit the issues page at github.com/bllfoad/zlocalz/issues.
zlocalz update for immediate updates"autoUpdate": false in confignpm install -g zlocalz
Simply run zlocalz without any arguments to launch the interactive setup wizard:
zlocalz
The setup wizard will:
zlocalz.config.json and .env filesAlternatively, create a configuration file zlocalz.config.json manually:
{
"flutterLocalesPath": "lib/l10n/",
"sourceLocale": "en",
"targetLocales": ["es", "fr", "de"],
"fileFormat": "auto",
"autoUpdate": true,
"doAutoFix": true,
"translateMissing": true,
"geminiModel": "gemini-2.5-pro",
"preferOrder": "mirror-source"
}
Note:
autoUpdatedefaults totrue. Set tofalseto disable automatic updates and receive notifications instead.
ARB (Application Resource Bundle):
lib/l10n/app_en.arb
lib/l10n/app_es.arb
JSON:
locales/en.json
locales/es.json
YAML:
i18n/en.yml
i18n/es.yml
CSV (Multi-locale in one file):
translations.csv:
key,en,es,fr
welcome,"Welcome!","¡Bienvenido!","Bienvenue!"
export GEMINI_API_KEY="your-api-key"
# Interactive setup (first-time users)
zlocalz
# Auto-detect format and launch TUI
zlocalz scan
# Specify format explicitly
zlocalz scan --format json
zlocalz scan --format yaml
zlocalz scan --format csv
# Command-line mode
zlocalz scan --no-tui
The interactive setup wizard (zlocalz without arguments) provides:
lib/l10n, assets/l10n, etc.)zlocalz.config.json with your preferences.env file.env to .gitignore←/→ - Focus panes↑/↓ - Move selectionTab - Cycle panes/ - Global searchf - Filter menu* - Toggle "only issues"a - Auto-fix selectedt - Translate selectedd - View diffe - Edit valuem - Edit metadataSpace - Select/deselect keyA - Select all visibleS - Save changesP - Copy patchu - UndoCtrl+r - Redo: - Open command palette? - Show helpq - Quitzlocalz scan --path lib/l10n --source en --targets es fr
zlocalz fix
zlocalz translate --key YOUR_GEMINI_API_KEY
zlocalz scan --no-tui > report.json
# Open issues page
zlocalz issue
# Open new issue form
zlocalz issue --new
flutterLocalesPath: Path to your Flutter localization filessourceLocale: The reference locale (e.g., "en")targetLocales: Array of target locale codesdoAutoFix: Enable automatic fixes (default: false)translateMissing: Enable AI translation (default: false)geminiModel: Gemini model to use (default: "gemini-2.5-pro")styleGuidelines: Translation style rulesdomainGlossary: Key-value pairs for consistent translationsdoNotTranslate: Tokens to preserve (e.g., brand names)preferOrder: "mirror-source" or "alphabetical"f to filter by issue typea to auto-fix selected issuest to translate missing keysd) to review changesS to write changes to diskZLocalz generates a comprehensive JSON report with:
We are open to collaboration and welcome contributions of all sizes. Ways you can help:
How to collaborate:
git checkout -b feat/your-featurenpm installnpm run devnpm run buildnpm run lint and npm testFor discussions, ideas, or questions, please open an issue in the repository.
MIT
FAQs
ZLocalz - TUI Locale Guardian for Flutter ARB l10n/i18n validation and translation with AI-powered fixes
We found that zlocalz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.