GitHub - build-neurall/implit: Validate imports and catch fake AI-generated dependencies

Stop AI hallucinations before they break your code

"AI wrote code with fake packages. Implit caught them in 0.3 seconds."

Quick Start • Features • Why Implit? • Examples

😱 The Problem

// AI generates this code...
import { awesomeAuth } from 'super-auth-lib';  // ❌ DOESN'T EXIST
import { fetchUser } from './api/users';       // ❌ NO export named fetchUser
import { login } from 'magic-auth';            // ❌ TYPO - should be 'magic-auth-lib'

// You run npm install... 💥 BROKEN BUILD

Every developer using AI has experienced this:

❌ AI invents npm packages that don't exist
❌ AI guesses wrong local import paths
❌ Security risk: hackers can register fake packages
❌ Hours wasted debugging phantom dependencies

✨ The Solution

Implit scans your AI-generated code and validates every import BEFORE you run it.

npx @neurall.build/implit check generated-code.ts

🔍 Checking generated-code.ts...

✓ react - Package exists on npm
✓ lodash - Package exists on npm
✗ super-auth-lib - Package NOT FOUND on npm registry
✗ ./api/users - No export named 'fetchUser' (available: getUser, deleteUser)
✗ magic-auth - Package NOT FOUND (did you mean: magic-auth-lib?)

❌ Found 3 hallucinated imports!

🚀 Quick Start

Zero Config (Recommended)

# Check any file instantly - no installation needed
npx @neurall.build/implit check your-file.ts

Global Install

# Install globally for frequent use
npm install -g @neurall.build/implit

# Then run anywhere
implit check your-file.ts

Generate Fix Prompt for AI

# Get a ready-to-paste prompt to feed back to your AI
npx @neurall.build/implit check your-file.ts --fix

Output:

📋 Fix prompt (ready to paste):

Your generated code has invalid imports:

1. "super-auth-lib" does not exist on npm.
2. "./api/users" does not export "fetchUser". Available exports: getUser, deleteUser.
3. "magic-auth" does not exist. Did you mean "magic-auth-lib"?

Please fix these imports and regenerate the code.

🎯 Features

✓ npm Package Verification

Checks every external import against registry.npmjs.org
Detects typos with fuzzy matching ("Did you mean...")
Prevents supply chain attacks from fake packages

✓ Local Import Validation

Scans your local files for actual exports
Detects missing files
Reports available exports for wrong imports

✓ Node.js Built-in Detection

Automatically recognizes Node.js built-ins (fs, path, http, etc.)
No false positives on standard modules

✓ Smart Caching

Caches npm lookups for 24 hours
Blazing fast on repeated runs
Minimal network overhead

✓ Zero Config

Works out of the box
No setup required
Just npx and go

✓ AI-Friendly Output

--fix flag generates clipboard-ready prompts
Feed directly back to Claude, GPT, or Gemini
One-command workflow for AI-assisted coding

💡 Why Implit?

Feature	Implit	Manual Review	IDE Linter
Catches fake npm packages	✓	Maybe	✗
Validates local exports	✓	Maybe	✗
Zero setup required	✓	—	✗
Works on any file	✓	—	✗
Generates AI fix prompts	✓	—	—
Speed	0.3s	Minutes	Realtime*

*IDE linters only catch already-installed packages, not hallucinated ones

📦 Examples

Basic Check

npx @neurall.build/implit check src/components/App.tsx

Check Multiple Files

npx @neurall.build/implit check src/**/*.ts

CI/CD Integration

# .github/workflows/check.yml
name: Validate Imports

on: [pull_request]

jobs:
  check:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
      - run: npx @neurall.build/implit check src/index.ts

JSON Output

npx @neurall.build/implit check your-file.ts --json

[
  {
    "module": "react",
    "valid": true,
    "type": "external",
    "message": "Package exists on npm"
  },
  {
    "module": "super-auth-lib",
    "valid": false,
    "type": "external",
    "message": "Package NOT FOUND on npm registry"
  }
]

🔧 Commands

Command	Description
`implit check <file>`	Check a file for hallucinated imports
`implit check <file> --fix`	Generate fix prompt for AI
`implit check <file> --json`	Output results as JSON
`implit check <file> --no-cache`	Skip cache, always query npm
`implit clear-cache`	Clear the dependency cache

🏆 Who Uses Implit?

AI Vibe Coders — Validate ChatGPT/Claude code before running
DevOps Teams — Catch issues before they hit CI/CD
Security Teams — Prevent dependency hijacking attacks
Open Source Maintainers — Validate PRs with AI-generated code

🤝 Contributing

Contributions are welcome! Please feel free to submit a Pull Request.

Fork the repository
Create your feature branch (git checkout -b feature/AmazingFeature)
Commit your changes (git commit -m 'Add some AmazingFeature')
Push to the branch (git push origin feature/AmazingFeature)
Open a Pull Request

📄 License

MIT License - feel free to use in personal and commercial projects.

🙏 Credits

Built by Neurall — making AI-assisted development safer.

⬆ Back to Top

Found this useful? Give us a ⭐ on GitHub!

推荐订阅源

Hacker News: Show HN