News for hackers. Stuff that matters.

modelorona

From what I see Aikido safe chain wraps the actual executable for npm, pnpm, pip etc with a proxy server that intercepts the requests to it and checks them.

deptrust does not wrap any executable and queries the advisory and package information directly. My goal with it was more focused on using it in Claude Code/Codex.

I've added a hook that can be installed for Claude and Codex.

Show HN: CLI that helps AI agents avoid vulnerable dependencies

https://github.com/clidey/deptrust

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more.It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service.I built this because AI coding agents kept...

( Read More... | 5 comments | 3 points | on HN )

Show HN: Connparse, a tool to parse DSNs, URLs, file paths, and cloud storage

https://github.com/clidey/connparse

Hello!This is a tool I created on the side that is able to parse connection strings for various data sources including SQL, NoSQL, files, cloud storage (s3, etc), and more.I created it because I wanted to add automatic parsing for WhoDB (day job) so that users do not have to type in each detail individually when they add a new data source.The parser currently supports SQL, NoSQL, file-based,...

( Read More... | no comments | 3 points | on HN )

Show HN: Open-source database CLI that doubles as an MCP server for agents

https://github.com/clidey/whodb/tree/main/cli

Hi HN, I work on WhoDB (a database management tool) and we've recently added a lot of updates to our cli so I wanted to share it here.WhoDB (https://github.com/clidey/whodb) is a database management tool for SQL and NoSQL databases, runs in your browser, can be launched via Docker, and is available on the Apple, Microsoft, and Snap store. The WhoDB cli is both an interactive and command driven...

( Read More... | no comments | 3 points | on HN )
Name could conflict with Keeper Security
Cofounder here, looks like formatting is a bit off. I do wonder why HN hasn’t invested in a better editor/display that could avoid these kind of display issues.
More for the landfill I guess
Re:Show HN: Mu – The Micro Network on Saturday November 29, 2025 @01:17AM (#46085529)
Why go?
co-founder here, happy to answer any questions!
Other co-founder here, happy to answer any questions in the comments! :)
Re:Show HN: Airweave – Let agents search any app on Monday May 12, 2025 @02:24PM (#43966066)
Looks cool! How are you thinking about pricing it?
Awesome to see GPUs being used for something other than crypto (are they still?) and AI.

How is it priced? I couldn't see anything on the site.

Show HN: Time Travel with Your SQL

Hi, my name is Anguel and I am one of the developers of WhoDB (https://github.com/clidey/whodb)I am not a fan of the dbeaver, beekeeper, adminer, etc experience because they are bloated, ugly, and at best okay but not great.Hence why I started working on WhoDB.The approach:- browser-based (chrome/firefox)- no bloat- jupyter notebook-like experience (Scratchpad)- built-in AI co-pilot with ollama...

( Read More... | 18 comments | 2 points | on HN )
Waiting on The Social Network pt. 2
Re:Gongzilla: The collapsing cost of dumb ideas on Saturday January 25, 2025 @06:29AM (#42821010)
Love this!
Re:How do you backup your Android? on Friday January 10, 2025 @02:23AM (#42653445)
Aegis for 2fa. Can backup to a file which can then be imported on the new phone.

Google's own backup service for normal backups. When I was rooted I used titanium backup but that was ages ago.

And then a lot of apps that have data that I care about have an export/import functionality, so I can just copy those over without much hassle.

Re:Show HN: The Atlas of Space on Wednesday January 08, 2025 @11:21AM (#42635740)
Awesome project!

Show HN: TapLock – double tap to lock your Android device

https://github.com/modelorona/TapLock

When I switched from a Samsung to a Pixel, I was shocked to discover that the 'double-tap to lock' feature (where you double-tap an empty area of the home screen to lock your device) wasn't a native option.This feature existed as far back as 2014 on my LG G3, so why is it missing on the Pixel?While there are alternatives on the Play Store, most are either closed-source or bundled into custom...

( Read More... | no comments | 3 points | on HN )
Very cool! I will try this over the weekend with a new android app to see what kind of README I can generate.

Do you have any plans to expand it?

Re:.an, the TLD that ceased to exist on Wednesday November 27, 2024 @11:42AM (#42257414)
Wonder if we'll see a similar post at some point about .io domains
hey thanks for your message! I am using the API that's here: https://www.reddit.com/dev/api/

From my understanding, it's used a lot by moderators. It's likely that they may block me since I do not pass any authentication or identifier info, but I don't think it'll happen soon as my use case is extremely simple (knock wood).

I query it as such: https://www.reddit.com/r/earth/top.json?limit=50 and then parse it on the front.

During my testing, I was blocked only once and that was because I ended up querying the same URL too much, which in normal usage shouldn't happen.

The previous iteration used a library called snoowrap (https://github.com/not-an-aardvark/snoowrap) which is unfortunately archived now.

Thank you for the feedback about the image context!

Show HN: Scroll-It – a Reddit thread auto-scroller for subreddit image threads

https://scroll-it.xyz

Hey there!I want to tell you about Scroll-It (https://scroll-it.xyz), a little side project I've been working on. I first made it back in 2020 to learn about VueJS and Vuetify, and I've just finished giving it a big update. You can see the source code on github (https://github.com/modelorona/scroll-it)Scroll-It is a simple gallery auto-scroller that lets you look through Reddit image posts. You...

( Read More... | 2 comments | on HN )