infynon 0.2.0-beta.8 → 0.2.0-beta.8.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +148 -22
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -2,13 +2,18 @@
|
|
|
2
2
|
|
|
3
3
|
INFYNON is a CLI for:
|
|
4
4
|
|
|
5
|
-
- package
|
|
5
|
+
- package security with `infynon pkg`
|
|
6
6
|
- API flow testing with `infynon weave`
|
|
7
|
-
-
|
|
7
|
+
- repo memory & provenance with `infynon trace`
|
|
8
8
|
|
|
9
9
|
[](https://www.npmjs.com/package/infynon)
|
|
10
10
|
[](https://github.com/d4rkNinja/infynon-cli/blob/main/LICENSE)
|
|
11
11
|
[](https://github.com/d4rkNinja/infynon-cli)
|
|
12
|
+
[](https://cli.infynon.com/docs)
|
|
13
|
+
[](https://github.com/d4rkNinja/code-guardian)
|
|
14
|
+
|
|
15
|
+
Website: [cli.infynon.com](https://cli.infynon.com)
|
|
16
|
+
Claude Code companion: [d4rkNinja/code-guardian](https://github.com/d4rkNinja/code-guardian)
|
|
12
17
|
|
|
13
18
|
## Install
|
|
14
19
|
|
|
@@ -18,10 +23,59 @@ npm install -g infynon
|
|
|
18
23
|
|
|
19
24
|
This package downloads the matching native binary for your OS and architecture.
|
|
20
25
|
|
|
26
|
+
## Good Fit For
|
|
27
|
+
|
|
28
|
+
- teams doing AI-assisted or high-speed coding
|
|
29
|
+
- backend teams testing stateful API workflows
|
|
30
|
+
- repos where package ownership and handoff context matter
|
|
31
|
+
- developers who want one CLI instead of three disconnected tools
|
|
32
|
+
|
|
33
|
+
## Why INFYNON Exists
|
|
34
|
+
|
|
35
|
+
INFYNON was created because modern repos usually hit three problems at the same time:
|
|
36
|
+
|
|
37
|
+
- dependencies move faster than teams can review them
|
|
38
|
+
- API testing breaks when workflows span multiple requests
|
|
39
|
+
- provenance gets lost between branches, PRs, and different machines
|
|
40
|
+
|
|
41
|
+
Instead of solving only one of those, INFYNON groups them under one CLI.
|
|
42
|
+
|
|
43
|
+
## What INFYNON Includes
|
|
44
|
+
|
|
45
|
+
| Area | Command | Best For | What It Solves |
|
|
46
|
+
|---|---|---|---|
|
|
47
|
+
| Package Security | `infynon pkg` | scanning, safe installs, remediation, monitoring | risky dependencies, invisible installs, version exposure |
|
|
48
|
+
| API Flow Testing | `infynon weave` | multi-step API execution and validation | brittle request scripts, missing flow context, runtime probes |
|
|
49
|
+
| Repo Memory & Provenance | `infynon trace` | handoffs, package ownership, branch/PR/file/package notes, TUI inspection | lost context across people, PRs, branches, and machines |
|
|
50
|
+
|
|
51
|
+
## How the workflow fits together
|
|
52
|
+
|
|
53
|
+
- `pkg` checks what is entering the system
|
|
54
|
+
- `weave` tests how the real API path behaves
|
|
55
|
+
- `trace` preserves who changed what, why it changed, and what the team knew at the time
|
|
56
|
+
|
|
57
|
+
## Best With Claude Code
|
|
58
|
+
|
|
59
|
+
Trace works best with `code-guardian` when you want Claude Code to pull the latest handoff context before work and update it again after the task.
|
|
60
|
+
|
|
61
|
+
- Claude Code companion: [d4rkNinja/code-guardian](https://github.com/d4rkNinja/code-guardian)
|
|
62
|
+
- good fit for Claude Code hook-based Trace workflows
|
|
63
|
+
- gives Trace a practical agent-side bridge instead of leaving context updates fully manual
|
|
64
|
+
|
|
65
|
+
## Comparison Table
|
|
66
|
+
|
|
67
|
+
| Workflow Need | Typical Pain | INFYNON Answer |
|
|
68
|
+
|---|---|---|
|
|
69
|
+
| dependency safety | install first, understand later | `pkg` scans, audits, and supports stricter install workflows |
|
|
70
|
+
| API flow confidence | one request works, the full workflow fails | `weave` models and runs the whole flow |
|
|
71
|
+
| repo provenance | context is scattered and stale | `trace` keeps it structured, queryable, and inspectable |
|
|
72
|
+
|
|
21
73
|
## Command Areas
|
|
22
74
|
|
|
23
75
|
### `infynon pkg`
|
|
24
76
|
|
|
77
|
+
Use this when the problem is packages.
|
|
78
|
+
|
|
25
79
|
- scan lockfiles for vulnerable packages
|
|
26
80
|
- secure install wrapper for multiple ecosystems
|
|
27
81
|
- audit, why, outdated, diff, doctor, fix, clean, migrate
|
|
@@ -35,6 +89,8 @@ infynon pkg npm install express --strict high
|
|
|
35
89
|
|
|
36
90
|
### `infynon weave`
|
|
37
91
|
|
|
92
|
+
Use this when the problem is API behavior across multiple steps.
|
|
93
|
+
|
|
38
94
|
- create API nodes and flows
|
|
39
95
|
- run connected request chains
|
|
40
96
|
- import OpenAPI
|
|
@@ -47,40 +103,110 @@ infynon weave flow create "checkout" --ai "login then create order"
|
|
|
47
103
|
infynon weave flow run checkout
|
|
48
104
|
```
|
|
49
105
|
|
|
50
|
-
### `infynon
|
|
106
|
+
### `infynon trace`
|
|
107
|
+
|
|
108
|
+
Use this when the problem is repo memory, handoff context, and package provenance.
|
|
51
109
|
|
|
52
110
|
- canonical, team, and user memory layers
|
|
53
111
|
- Redis or SQL backends
|
|
54
|
-
- package notes that
|
|
112
|
+
- package notes that identify who introduced a compromised dependency
|
|
55
113
|
- sync, retrieve, compact, and TUI inspection
|
|
114
|
+
- designed to pair with the `code-guardian` Claude Code companion
|
|
56
115
|
|
|
57
116
|
```bash
|
|
58
|
-
infynon
|
|
59
|
-
infynon
|
|
60
|
-
infynon
|
|
61
|
-
infynon
|
|
117
|
+
infynon trace init --owner team --user alien
|
|
118
|
+
infynon trace source add-sql team-db --engine sqlite --url sqlite://.infynon/trace/trace.db --user alien --default
|
|
119
|
+
infynon trace note add repo-handoff --title "Auth changed" --body "Refresh moved into middleware"
|
|
120
|
+
infynon trace sync --direction both
|
|
121
|
+
infynon trace tui
|
|
62
122
|
```
|
|
63
123
|
|
|
64
|
-
|
|
124
|
+
Claude Code companion:
|
|
125
|
+
[d4rkNinja/code-guardian](https://github.com/d4rkNinja/code-guardian)
|
|
126
|
+
|
|
127
|
+
## Head-to-Head Comparison
|
|
128
|
+
|
|
129
|
+
### `infynon pkg` vs Alternatives
|
|
130
|
+
|
|
131
|
+
| Feature | infynon pkg | npm audit | Snyk CLI | Socket CLI | OSV-scanner |
|
|
132
|
+
|---|:---:|:---:|:---:|:---:|:---:|
|
|
133
|
+
| Secure install wrapper | ✓ | — | — | ~ npm only | — |
|
|
134
|
+
| 14 ecosystems in one scan | ✓ | — | ~ | ~ | ~ |
|
|
135
|
+
| Block installs via strict mode | ✓ | — | — | ~ npm only | — |
|
|
136
|
+
| Scheduled CLI monitoring | ✓ | — | ~ server-side | — | — |
|
|
137
|
+
| PDF + Markdown report export | ✓ | — | — | — | — |
|
|
138
|
+
| Package version diff | ✓ | — | — | — | — |
|
|
139
|
+
| Per-package install decisions | ✓ | — | — | — | — |
|
|
140
|
+
| Auto-fix / remediation | ✓ | ~ basic | ✓ | ✓ | — |
|
|
141
|
+
| No SaaS account required | ✓ | ✓ | — | ~ | ✓ |
|
|
142
|
+
|
|
143
|
+
### `infynon weave` vs Alternatives
|
|
144
|
+
|
|
145
|
+
| Feature | infynon weave | Postman | Hoppscotch | Bruno | Insomnia |
|
|
146
|
+
|---|:---:|:---:|:---:|:---:|:---:|
|
|
147
|
+
| Terminal TUI | ✓ | — | — | — | — |
|
|
148
|
+
| Runtime prompts (OTP / 2FA) | ✓ | — | ~ | — | — |
|
|
149
|
+
| Built-in AI security probes | ✓ | — | — | — | — |
|
|
150
|
+
| AI-assisted flow creation (CLI) | ✓ | ~ GUI only | ~ GUI / alpha | — | — |
|
|
151
|
+
| Visual flow graph in terminal | ✓ | — | — | — | — |
|
|
152
|
+
| Run diff (side-by-side) | ✓ | — | — | ~ paid | — |
|
|
153
|
+
| Context threading between nodes | ✓ | ✓ | ✓ | ✓ | ✓ |
|
|
154
|
+
| OpenAPI / Swagger import | ✓ | ✓ | ✓ | ✓ | ✓ |
|
|
155
|
+
| Offline, no account required | ✓ | — | ✓ | ✓ | ~ |
|
|
156
|
+
|
|
157
|
+
### `infynon trace` vs Alternatives
|
|
158
|
+
|
|
159
|
+
| Feature | infynon trace | GitHub Wiki | Notion | Confluence | Obsidian |
|
|
160
|
+
|---|:---:|:---:|:---:|:---:|:---:|
|
|
161
|
+
| Native CLI | ✓ | — | ~ 3rd party | ~ ACLI | ✓ |
|
|
162
|
+
| Branch / file / package scoping | ✓ | — | — | — | — |
|
|
163
|
+
| Package ownership tracking | ✓ | — | — | — | — |
|
|
164
|
+
| Redis + SQL backend choice | ✓ | — | — | — | — |
|
|
165
|
+
| Multi-layer memory (team / user / canonical) | ✓ | — | — | — | — |
|
|
166
|
+
| Terminal TUI inspection | ✓ | — | — | — | — |
|
|
167
|
+
| Claude Code native integration | ✓ | — | ~ MCP | — | ~ |
|
|
168
|
+
| Structured retrieval by scope | ✓ | — | — | — | — |
|
|
169
|
+
| Bidirectional sync via CLI | ✓ | — | ~ | ~ | ✓ |
|
|
170
|
+
|
|
171
|
+
`✓` = supported · `~` = partial or limited · `—` = not supported
|
|
172
|
+
|
|
173
|
+
## Backend Choice For Trace
|
|
174
|
+
|
|
175
|
+
| Backend | Better For |
|
|
176
|
+
|---|---|
|
|
177
|
+
| Redis | fast live retrieval, active session state, lower-latency coordination |
|
|
178
|
+
| SQL | durable structured history, stronger filtering, canonical memory |
|
|
65
179
|
|
|
66
|
-
|
|
180
|
+
## Documentation
|
|
67
181
|
|
|
68
|
-
-
|
|
69
|
-
-
|
|
70
|
-
-
|
|
182
|
+
- docs home: [cli.infynon.com/docs](https://cli.infynon.com/docs)
|
|
183
|
+
- root README: `README.md`
|
|
184
|
+
- command reference: `docs/commands.md`
|
|
185
|
+
- Trace guide: `docs/trace.md`
|
|
186
|
+
- Weave guide: `docs/weave.md`
|
|
187
|
+
- Claude Code companion: [d4rkNinja/code-guardian](https://github.com/d4rkNinja/code-guardian)
|
|
71
188
|
|
|
72
|
-
|
|
189
|
+
## Comparison Blogs
|
|
73
190
|
|
|
74
|
-
-
|
|
75
|
-
-
|
|
76
|
-
-
|
|
191
|
+
- [One CLI vs fragmented tooling](https://cli.infynon.com/blog/why-infynon-over-fragmented-tooling)
|
|
192
|
+
- [`pkg` vs `npm audit`](https://cli.infynon.com/blog/infynon-vs-npm-audit)
|
|
193
|
+
- [`pkg` vs Snyk CLI](https://cli.infynon.com/blog/infynon-vs-snyk-cli)
|
|
194
|
+
- [`pkg` vs Socket.dev](https://cli.infynon.com/blog/infynon-vs-socket-dev)
|
|
195
|
+
- [Why Trace exists](https://cli.infynon.com/blog/why-i-built-trace)
|
|
196
|
+
- [Why repo memory matters](https://cli.infynon.com/blog/agentic-coding-context-problem)
|
|
77
197
|
|
|
78
|
-
##
|
|
198
|
+
## Recommended Stack
|
|
79
199
|
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
200
|
+
```text
|
|
201
|
+
INFYNON CLI + Trace + code-guardian
|
|
202
|
+
```
|
|
203
|
+
|
|
204
|
+
Use that stack when you want:
|
|
205
|
+
|
|
206
|
+
- package risk scanning with `pkg`
|
|
207
|
+
- workflow-level API testing with `weave`
|
|
208
|
+
- structured repo context with `trace`
|
|
209
|
+
- Claude Code automation around Trace retrieval and updates through `code-guardian`
|
|
84
210
|
|
|
85
211
|
## License
|
|
86
212
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "infynon",
|
|
3
|
-
"version": "0.2.0-beta.8",
|
|
3
|
+
"version": "0.2.0-beta.8.2",
|
|
4
4
|
"description": "Security CLI for developers: scan npm/pip/cargo installs for CVEs before execution, self-hosted reverse proxy WAF with TUI, and API flow security testing across 14 ecosystems.",
|
|
5
5
|
"bin": {
|
|
6
6
|
"infynon": "./run.js",
|