
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
refereekit
Advanced tools
refereekit helps you referee a paper with a language model. It checks every quotation, page, equation and figure that an answer or a draft cites against the submitted PDF. It then drafts a referee report and an editor letter in your style, from claims that checked out. You edit them. The verdict is yours.
You need a terminal and uv. Two commands start a review:
uv tool install refereekit
refx chat paper.pdf
In the chat, /model access sets your model. For anthropic, bedrock
and vertex it names one more install line. /tutorial runs a practice
review that needs no key. Your terminal is the private view.
You can also review in pi, Claude Code, Codex or Claude Desktop, or in the ChatGPT desktop app as a preview. Paste the setup prompt into your agent, which sets refereekit up. refereekit never gives the paper to the agent's model. What you type in the agent's chat does reach it, so keep the paper's title out. You read the paper, and type your judgment, in a private view.
Confidentiality first. A manuscript under review goes only to a model backend, after you attest what its account keeps. It never enters this repository. See Confidentiality.
Documentation: start with Before you start, then pick a reading path from the documentation index.
If you use refereekit in your research, please cite the following paper:
@inproceedings{yen2026models,
title={Models Quote, Code Verifies, Humans Judge: Lessons for AI-Assisted Peer Review},
author={Tzu-Chi Yen},
booktitle={NeurIPS 2026 Workshop on AI-Native Academia},
year={2026}
}
MIT. See LICENSE.
FAQs
Unknown package
We found that refereekit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.