
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
A CLI tool to generate smart commit messages, code documentation, and more.
Install from PyPI:
pip install penify
Penify CLI provides several subcommands for different functionalities, organized into basic commands (no login required) and advanced commands (login required).
Generate smart commit messages using local LLM:
penify commit [-m "Optional message"] [-e] [-d]
Options:
-m, --message
: Optional custom commit message-e, --terminal
: Open editor to modify commit message before committing-d, --description
: Generate commit message with both title and description (without this flag, only title is generated)Configure local LLM and JIRA settings:
# Configure LLM settings
penify config llm --model MODEL_NAME [--api-base API_URL] [--api-key API_KEY]
# Configure LLM settings through web interface
penify config llm-web
# Configure JIRA settings
penify config jira --url JIRA_URL --username USERNAME --api-token TOKEN [--verify]
# Configure JIRA settings through web interface
penify config jira-web
To log in and obtain an API token:
penify login
This command will open a browser window for authentication. After successful login, the API key will be saved locally for future use.
Generate documentation for Git diff, files or folders:
# Generate documentation for latest Git commit diff
penify docgen
# Generate documentation for specific file or folder
penify docgen -l /path/to/file/or/folder
Options:
-l, --location
: Path to specific file or folder for documentation generation (defaults to current directory)Install or uninstall Git post-commit hooks:
# Install Git hook
penify docgen install-hook [-l /path/to/repo]
# Uninstall Git hook
penify docgen uninstall-hook [-l /path/to/repo]
Options:
-l, --location
: Path to the Git repository (defaults to current directory)Penify CLI uses an API token for authentication with advanced features.
If no token is available and you try to access an advanced feature, you'll be prompted to log in.
For commit message generation, Penify can use a local LLM. Configure it using:
penify config llm --model MODEL_NAME --api-base API_URL --api-key API_KEY
Common configurations:
--model gpt-3.5-turbo --api-base https://api.openai.com/v1 --api-key YOUR_KEY
--model claude-2 --api-base https://api.anthropic.com --api-key YOUR_KEY
Configure JIRA integration to enhance commit messages with issue details:
penify config jira --url https://your-domain.atlassian.net --username your-email@example.com --api-token YOUR_API_TOKEN
To set up the development environment:
Clone the repository:
git clone https://github.com/SingularityX-ai/penify-cli.git
Install the package in editable mode:
pip install -e .
pytest
This project is licensed under the MIT License.
Suman Saurabh (ss.sumansaurabh92@gmail.com)
Contributions are welcome! Please feel free to submit a Pull Request.
If you encounter any problems or have suggestions, please file an issue on the GitHub repository.
For automated API Documentation, Architecture Documentation, Code Documentation, Pull Request Documentation, or if you need a demo, please join our Discord support channel.
FAQs
A penify cli tool to generate Documentation, Commit-summary.
We found that penify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.