
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
@flexsiteio/cli
Advanced tools
Command-line tool for managing FlexSite projects. Download and import database and files backups to your local Lando or DDEV environment.
npm install -g @flexsiteio/cli
Get an access token from your FlexSite dashboard under Profile > Access Tokens
Login with your token:
flexsite auth login
Sync your local environment:
flexsite sync
# Login with a personal access token
flexsite auth login
# Login with token directly (non-interactive)
flexsite auth login --token fst_xxx_...
# Check authentication status
flexsite auth status
# Logout
flexsite auth logout
# Download and import latest database backup
flexsite db pull
# Download to specific environment
flexsite db pull --env <environmentId>
# List available backups
flexsite db list
# Download without importing
flexsite db pull --no-import
# Download and extract latest files backup
flexsite files pull
# Download to specific environment
flexsite files pull --env <environmentId>
# List available backups
flexsite files list
# Download without extracting
flexsite files pull --no-import
# Sync both database and files
flexsite sync
# Sync only database
flexsite sync --db-only
# Sync only files
flexsite sync --files-only
# Show current configuration
flexsite config show
# Set default organization
flexsite config set org <orgId>
# Set default project
flexsite config set project <projectId>
# Set default environment
flexsite config set env <envId>
# Show config file path
flexsite config path
Transform composer.json from other platforms (Pantheon, Acquia, Platform.sh) to FlexSite format.
# Check composer.json for FlexSite compatibility
flexsite composer check
# Fix composer.json for FlexSite (interactive)
flexsite composer fix
# Fix with project name specified
flexsite composer fix --name my-project
# Preview changes without modifying files
flexsite composer fix --dry-run
# Create backup before modifying
flexsite composer fix --backup
# Skip adding performance packages
flexsite composer fix --skip-performance
# Specify custom file path
flexsite composer fix -f path/to/composer.json
What composer fix does:
| Change | Description |
|---|---|
| Name | Updates to flexsite/{project-name} |
| Repositories | Adds FlexSite package repository, removes platform-specific paths |
| Packages | Removes Pantheon/Acquia packages, adds flexsite/fs_performance, drupal/redis, drupal/purge, drupal/varnish_purge |
| Installer paths | Adds recipes/{$name} for Drupal recipes, removes Quicksilver |
| Scaffold | Removes platform-specific file mappings |
| Scripts | Removes platform-specific composer scripts |
Supported platforms:
pantheon-upstreams/drupal-composer-managed)acquia/blt)platformsh/config-reader)The CLI automatically detects Lando and DDEV environments and uses the appropriate commands for importing databases and files.
When a .lando.yml file is present or the LANDO environment variable is set to ON, the CLI will use:
lando db-import for database importstar extraction for files, with permission fixes via lando sshWhen a .ddev/config.yaml file is present or the IS_DDEV_PROJECT environment variable is set to true, the CLI will use:
ddev import-db for database importstar extraction for files, with permission fixes via ddev execThe CLI stores configuration in ~/.flexsite/config.json:
{
"version": 1,
"tokens": {
"d112c061": {
"token": "fst_d112c061_...",
"userId": "110bc5d0-...",
"organizationId": "d112c061-...",
"organizationName": "My Company"
}
},
"defaults": {
"organizationId": "d112c061-...",
"projectId": "727aa8c7-...",
"environmentId": "f9b72cdd-..."
}
}
FLEXSITE_API_URL - Override the API base URL (default: https://cli-api.flexsite.io/v1)When creating a personal access token, you can limit its permissions:
| Scope | Description |
|---|---|
backup:read | Download database backups |
backup:create | Create new database backups |
files:read | Download files backups |
files:create | Create new files backups |
drush:execute | Execute Drush commands remotely |
projects:read | List projects |
environments:read | List environments |
Note: The
flexsite composercommands work locally and do not require authentication or any token scopes.
MIT
FAQs
FlexSite CLI - Command-line tool for managing FlexSite projects
We found that @flexsiteio/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.