
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Developed by the AI Verify Foundation, Moonshot is a tool to bring Benchmarking and Red-Teaming together to help AI developers, compliance teams evaluate LLM-based Apps and LLMs.
In the rapidly evolving landscape of Generative AI, ensuring safety, reliability, and performance of LLM applications is paramount. Moonshot addresses this critical need by providing a unified platform for:
Moonshot can be used through several interfaces:
This section will guide you through getting Moonshot up and running.
Python: Version 3.11 is required.
Git Version Control: Git is essential for cloning the repository.
(Optional) Virtual Environment: Highly recommended to manage dependencies.
# Create a virtual environment
python -m venv venv
# Activate the virtual environment
source venv/bin/activate
If you plan to install our Web UI, you will also need Node.js version 20.11.1 LTS and above
You can install Moonshot in various ways depending on your needs
1. Using pip
(Recommended for most users)
# Install Project Moonshot's Python Library, which includes Moonshot's full functionalities (Library APIs, CLI and Web APIs)
pip install "aiverify-moonshot[all]"
# Clone and install test assets and Web UI
python -m moonshot -i moonshot-data -i moonshot-ui
⚠️ You will need to have test assets from moonshot-data before you can run any tests.
🖼️ If you plan to install our Web UI, you will also need moonshot-ui
Check out our Installation Guide for more details.
2. From Source Code (For developers and contributors)
# To install from source code (Full functionalities)
git clone git@github.com:aiverify-foundation/moonshot.git
cd moonshot
pip install -r requirements.txt
If you have installation issues, please take a look at the Troubleshooting Guide.
# To install Moonshot library APIs only
pip install aiverify-moonshot
# To install Moonshot library APIs and Web APIs only
pip install "aiverify-moonshot[web-api]"
# To install Moonshot library APIs and CLI only
pip install "aiverify-moonshot[cli]"
Check out our Installation Guide for more details.
python -m moonshot web
Open http://localhost:3000/ in a browser and you should see this homepage:
Refer to this guide to discover the rich features available in Moonshot Web UI
python -m moonshot cli interactive
Refer to this Command List to discover the list of CLI commands for Moonshot
For detailed information on configuring, using, and extending Moonshot, please refer to our comprehensive documentation:
Moonshot is an open-source project, and we welcome contributions from the community! Whether fixing a bug, adding a new feature, improving documentation, or suggesting an enhancement, your efforts are highly valued.
Please refer to our Contributor Guide for details on how to get started.
Moonshot is currently in beta. We are actively developing new features, improving existing ones, and enhancing stability. We encourage you to try it out and provide feedback!
Moonshot is released under the Apache Software License 2.0
FAQs
AI Verify advances Gen AI testing with Project Moonshot.
We found that aiverify-moonshot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.