Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ai_changelog
is a Python project that automatically generates changelog files summarizing code changes, using AI.
It uses LangChain and OpenAI models to analyze Git commit diffs and generate natural language descriptions of the changes. This allows maintaining an up-to-date changelog without manual effort.
This README was originally written by Claude, an LLM from Anthropic.
usage: ai_changelog [-h] [--provider {openai,anthropic,anyscale}] [--model MODEL] [--temperature TEMPERATURE] [--max_tokens MAX_TOKENS] [--hub_prompt HUB_PROMPT]
[--context_lines CONTEXT_LINES] [--max_concurrency MAX_CONCURRENCY] [-v]
refs
Process command line arguments.
positional arguments:
refs Reference comparison with standard git syntax
options:
-h, --help show this help message and exit
--provider {openai,anthropic,anyscale}
Model API provider
--model MODEL Model name
--temperature TEMPERATURE
Model temperature
--max_tokens MAX_TOKENS
Max tokens in output
--hub_prompt HUB_PROMPT
Prompt to pull from LangChain Hub
--context_lines CONTEXT_LINES
Number of context lines for each commit
--max_concurrency MAX_CONCURRENCY
Number of concurrent connections to llm provider (0 means no limit)
-v, --verbose Run LangChain in verbose mode
http://github.com/joshuasundance-swca/ai_changelog
To generate a changelog locally:
pip install ai_changelog
ai_changelog --help
ai_changelog main..HEAD # to summarize changes locally
docker pull joshuasundance/ai_changelog:latest
docker run \
--env-file .env \
-v /local_repo_dir:/container_dir_in_repo \
-w /container_dir_in_repo \
joshuasundance/ai_changelog:latest \
main..HEAD
The ai_changelog_main_pr.yml workflow runs on pushes to main
.
It generates summaries for the new commits and appends them to AI_CHANGELOG.md
. The updated file is then committed back to the PR branch.
ai_changelog origin/main^..origin/main # in a GitHub action to summarize changes in response to a push to main
ai_changelog origin/main..HEAD # in a GitHub action to summarize changes in response to a PR
Another flow was made to commit an updated changelog to an incoming PR before it was merged, but that seemed less useful although it did work well.
OPENAI_API_KEY
).This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
A Python project that generates AI-based changelogs.
We found that ai-changelog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.