anthropics/claude-code
Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.
How claude-code is put together
This repository is the public home of Claude Code's official plugin ecosystem rather than the CLI itself: a collection of Claude Code plugins (commands, agents, skills, hooks) distributed via a plugin marketplace manifest. The executable code is concentrated in two Python-based hook plugins: 'security-guidance', which runs lifecycle hooks (SessionStart, PostToolUse, Stop) that capture git baselines, diff Claude-authored changes, run regex pattern checks plus LLM-based security reviews via claude_agent_sdk, and re-inject warnings into the session; and 'hookify', which lets users define warn/block rules in markdown-with-YAML-frontmatter files under .claude/. Data flow is: Claude Code fires hook events -> Python hook subprocesses read git/session state -> findings are emitted back to the model as tagged reminders, with per-session JSON state persisted under ~/.claude/security/.
Languages
Frameworks
Infrastructure
Major components
security-guidance hooks
Lifecycle hook suite that captures git baselines, diffs touched files, runs built-in and user-defined security patterns, performs LLM-based commit/diff review, and injects provenance-tagged warnings back into the Claude session.
security-guidance state layer
Per-session locked JSON state (baseline SHAs, touched paths, fire counts, previous findings) and repo-local reviewed-SHA logs stored under ~/.claude/security/ and .git/.
security-guidance extensibility
Loads project/user-supplied claude-security-guidance.md and security-patterns.{yaml,json} configs, validates custom regexes for ReDoS, and merges them additively with built-in rules.
agent SDK bootstrap
SessionStart hook that ensures claude_agent_sdk is importable by building a venv at ~/.claude/security/agent-sdk-venv with pip-installed SDK as fallback.
hookify plugin
User-configurable warn/block rules defined in .claude/hookify.*.local.md frontmatter files, loaded by a hand-rolled YAML parser and enforced across bash/file/stop events.
markdown command/agent plugins
Pure-markdown plugins (code-review, feature-dev, pr-review-toolkit, commit-commands, frontend-design, plugin-dev, etc.) providing slash commands, subagents, and skills.
plugin marketplace
.claude-plugin/marketplace.json catalog that makes the plugins discoverable/installable in Claude Code.
devcontainer
Docker-based development environment with an init-firewall.sh network-restriction script.
A quiet week limited to routine change log and feed maintenance.
5 weeksWeek of 2026-08-24
Week of 2026-08-24latest
A quiet week limited to routine change log and feed maintenance.
Week of 2026-08-17
Routine documentation upkeep plus a small community-contributed fix.
Week of 2026-08-10
Another quiet week of standard record-keeping updates.
Week of 2026-08-03
No new features; just steady maintenance of release notes.
Week of 2026-07-20
The standout week: a new AWS example for running a Claude apps gateway was added.
The last several weeks of activity on this repository were dominated by routine housekeeping, with repeated updates to the project's change log and news feed. The only substantive addition was a new example deployment showing how to run a Claude apps gateway on AWS. Overall, it was a quiet stretch focused on documentation upkeep rather than new features or fixes.
Week by week
2026-08-24A quiet week limited to routine change log and feed maintenance.latest1 change
Chore
Change log and feed updates
The team refreshed the project's change history and news feed files three times to keep published records current.
2026-08-17Routine documentation upkeep plus a small community-contributed fix.2 changes
Chore
Change log and feed updates
The change history and news feed were updated eight times throughout the week.
Fix
Community patch merged
An outside contributor's small correction (pull request #72451) was reviewed and merged into the project.
2026-08-10Another quiet week of standard record-keeping updates.1 change
Chore
Change log and feed updates
The change history and news feed were refreshed six times to stay in sync with recent releases.
2026-08-03No new features; just steady maintenance of release notes.1 change
Chore
Change log and feed updates
Six routine updates kept the public change log and news feed up to date.
2026-07-20The standout week: a new AWS example for running a Claude apps gateway was added.3 changes
Feature
Claude apps gateway on AWS example
New example deployment assets were added showing how to set up a Claude apps gateway on Amazon Web Services.
Docs
AWS gateway example merged
The gateway example was contributed by the team and formally merged via pull request #79898.
Chore
Change log and feed updates
Six routine updates maintained the change history and news feed alongside the new example.
Dependencies and code review
Dependency advisories
Security Watch
No known advisories across 0 scanned dependencies.
No known advisories in the scanned dependencies.
Code review
No concrete code-level issues confirmed.
Get this report every week for your repos.
GitZoid learns each repo, reports what changed, and flags what needs attention. One flat price for the whole team.
$19 a month, flat · First 10 outputs free · No card required