
Research
NPM targeted by malware campaign mimicking familiar library names
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Despite the lack of stars, this is the best open source coding assistant you can use. See below for why.
pip install advanced-aicode
aicode
Why is this the best open source coding assistant? Because this is a front end for aider.chat, but with all the sharp edges filed off and the defaults you want, included automatically.
Features
aicode
is easier to install. Like WAY easier.aicode
will not f@ck up your global pip environment.aicode
will notify you of updates, invoke it with--update
aicode
will always turn on aider.chat's architect mode, which has significantly higher coding performance than non architect mode.aicode
always invokes --watch
mode, unless you shut it off via --no-watch
Before watch mode, you had to manually add files to the chat terminal, then tell aider what you wanted to do. Now aider will watch the files and look for comments that container AI! in it, then follow the instructions.
So for example, say you have this piece of code
def list_files(root: Path) -> list[Path]:
pass
Now let's say you want to implement this function. You will fire up aicode
and type in a comment that ends with AI!
in it, which the ai will see.
def list_files(root: Path) -> list[Path]"
pass # please implement this AI!
Aider will automatically see this and start editing the file!
The package name is NOT the same as the command tool. The package is advanced-aicode
and the tool is called aicode
. Someone
else grabbed package name aicode
over a year ago and this is the best name I could come up with to get it into pypi.
Happy CODING!
--deep
--no-architect
to get the old behavior.advanced-aicode
but should resolve the issue with OSX throwing exceptions for locked files. See aicode --purge
setuptools
dependency that was causing a non fatal error.aicode --upgrade
now more robust. Also fixed a path issue on windows.aicode --upgrade
has been fixed to work with uv
package upgrades.uv
. Much faster and better!isolated-environment
isolated-environment
to fix Mac/Linuxshell=True
.isolated-environment
instead of pipx
for better isolation. We now use keyring
to securely store your api keys.--just-check-update
which had a typo in the last version as --just-check-updated
aider --check-update
with --just-check-update
aider --skip-check-update
which is now --no-check-update
--upgrade
fails, then attempt recovery by asking the user to upgrade pipx
and then try again.FAQs
Front End for Aider.chat which makes it super simple to use
We found that advanced-aicode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.
Research
Socket's research uncovers three dangerous Go modules that contain obfuscated disk-wiping malware, threatening complete data loss.
Research
Socket uncovers malicious packages on PyPI using Gmail's SMTP protocol for command and control (C2) to exfiltrate data and execute commands.