
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Tired of trying to remember the exact flags to use or digging through documentation or googling to find how to do the thing you're trying to do?
Suffer no more! Simply describe what you're trying to do and generate the command with the help of an LLM!
Install the gem
gem install clag
Generate commands
clag g "create a new ruby on rails project using postgres and tailwindcss"
Get an API key from OpenAI for gpt4-turbo: https://platform.openai.com/
Set your API key as OPENAI_API_KEY in your environment
Get an API key from Google's AI Studio at https://ai.google.dev/
Set your API key as GEMINI_API_KEY in your environment
Select Gemini as your preferred LLM by setting CLAG_LLM=gemini in your environment
Get an API key from Anthropic at https://www.anthropic.com/
Set your API key as ANTHROPIC_API_KEY in your environment
Select Claude 3 Opus as your preferred LLM by setting CLAG_LLM=claude in your environment
Get an API key from https://console.groq.com/
Set your API key as GROQ_API_KEY in your environment
Select Groq as your preferred LLM by setting CLAG_LLM=groq in your environment
Have a model locally from either Ollama or Llamafile with an OpenAI compatible API
Have the API server running on port 8080
Select local as your preferred LLM by setting CLAG_LLM=local in your environment
Currently support one command: "g".
clag g "the command you'd like to generate"
Bug reports and pull requests are welcome on Github at https://github.com/sublayerapp/clag
Like what you see, or looking for more people working on the future of programming with LLMs? Come join us in the Promptable Architecture Discord
FAQs
Unknown package
We found that clag demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.