
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
Compiler-backed C#/.NET code intelligence for coding agents. Explore symbols and call graphs, inspect diagnostics, analyze complexity, dependencies, and impact, and safely edit and refactor solutions through MCP.
Navigate, analyze, edit, and refactor C#/.NET code with your coding agent. Glider provides compiler-backed tools through MCP and runs locally against your solution.
Install the .NET 10 SDK. Install Glider:
dotnet tool install --global glider
Choose your MCP client for connection instructions and a verification step.
See example tasks or the tool reference.
Glider analyzes loaded C# projects. Its search_text tool also searches their declared additional files and analyzer configuration files.
Use Scout for files outside that scope.
Run glider --help for CLI options. The setup guide covers automatic solution loads, workspaces, HTTP, and troubleshooting.
Check compatibility for supported projects and platforms.
For a legacy .NET Framework build-host failure on Windows, retry with glider --build-host netframework.
Use --msbuild-path "C:\Program Files\Microsoft Visual Studio\2022\Community\MSBuild\Current\Bin" if Glider selects the wrong toolset.
Replace that path with your installed MSBuild directory. Use glider --verbose for diagnostic details.
Glider will always be free for non-commercial use and work on open-source projects. Other commercial use is free for now. See the LICENSE file in this package for the full terms.
Each package expires one month after release. Update Glider:
dotnet tool update --global glider
Restart your MCP client after the update.
Package expiry is separate from license duration.
Glider processes code locally. Your MCP client controls what returned content reaches its model provider.
Glider enables usage telemetry by default. Use --no-telemetry or DO_NOT_TRACK=1 to disable telemetry and agent feedback.
The send_feedback tool can publish a public issue. See privacy and controls.
Report a problem. Read the documentation.
FAQs
Compiler-backed C#/.NET code intelligence for coding agents. Explore symbols and call graphs, inspect diagnostics, analyze complexity, dependencies, and impact, and safely edit and refactor solutions through MCP.
We found that glider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.