
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@11ty/import
Advanced tools
@11ty/importA small utility (and CLI) to import content files from various content sources. Requires Node 20.19 or newer.
--format=html to use raw HTML).--overwrite).
--dryrun for testing without writing any files.Published to npm. These commands do not require separate installation.
npx @11ty/import --help
npx @11ty/import --version
# Import content
npx @11ty/import [type] [target]
# Dry run (don’t write files)
npx @11ty/import [type] [target] --dryrun
# Quietly (limit console output)
npx @11ty/import [type] [target] --quiet
# Change the output folder (default: ".")
npx @11ty/import [type] [target] --output=dist
# Allow overwriting existing files
npx @11ty/import [type] [target] --overwrite
# Allow draft entries to overwrite existing files (bypasses --overwrite)
npx @11ty/import [type] [target] --overwrite-allow=drafts
# Change local fetch cache duration (default: 24h)
npx @11ty/import [type] [target] --cacheduration=20m
# Only import entries created (or updated) within a duration (default: *)
# Same syntax as --cacheduration
npx @11ty/import [type] [target] --within=7d
# Change output format (default: markdown)
npx @11ty/import [type] [target] --format=html
# Change asset reference URLs: relative (default), absolute, colocate, disabled
# slug.md and assets/asset.png with <img src="assets/asset.png">
npx @11ty/import [type] [target] --assetrefs=relative
# slug.md and assets/asset.png with <img src="/assets/asset.png">
npx @11ty/import [type] [target] --assetrefs=absolute
# slug/index.md and slug/asset.png with <img src="asset.png">
npx @11ty/import [type] [target] --assetrefs=colocate
# Don’t download any assets
npx @11ty/import [type] [target] --assetrefs=disabled
# EXPERIMENTAL: Persist *new* non-draft content
# - `github` persist type requires a `GITHUB_TOKEN` environment variable.
npx @11ty/import [type] [target] --persist=github:zachleat/wp-awesome
atom (URL)bluesky (username)fediverse (username)rss (URL)wordpress (blog home page URL)youtubeuser (user id)# Import recent YouTube Videos for one user
npx @11ty/import youtubeuser UCskGTioqrMBcw8pd14_334A
# Import *all* posts from the WordPress API
# Draft posts available when WORDPRESS_USERNAME and WORDPRESS_PASSWORD environment
# variables are supplied, read more: https://www.11ty.dev/docs/environment-vars/
npx @11ty/import wordpress https://blog.fontawesome.com
# Import Atom feed posts
npx @11ty/import atom https://www.11ty.dev/blog/feed.xml
# Import GitHub releases (via Atom)
npx @11ty/import atom https://github.com/11ty/eleventy/releases.atom
# Import RSS feed posts
npx @11ty/import rss https://fosstodon.org/users/eleventy.rss
# Import recent Mastodon posts (via RSS)
npx @11ty/import fediverse eleventy@fosstodon.org
# Import recent Bluesky posts (via RSS)
npx @11ty/import bluesky @11ty.dev
Don’t forget to install this into your project: npm install @11ty/import
import { Importer } from "@11ty/import";
let importer = new Importer();
importer.setOutputFolder("."); // --output
importer.setCacheDuration("24h"); // --cacheduration
importer.setVerbose(true); // --quiet
importer.setSafeMode(false); // --overwrite
importer.setDryRun(false); // --dryrun
importer.setDraftsFolder("drafts");
importer.setAssetsFolder("assets");
importer.setAssetReferenceType("relative"); // --assetrefs
// Sources (one or more)
importer.addSource("bluesky", "@11ty.dev");
// Simple CSS selector (class names only) for preserved elements in Markdown conversion
importer.addPreserved(".save-this-class-name");
// Allow draft entries to overwrite (independent of Safe Mode value)
importer.setOverwriteAllow("drafts");
let entries = await importer.getEntries({
within: "*", // date or last updated date must be within this recent duration (e.g. 24h, 7d, 1y)
// v1.0.20 and newer:
limit: 0, // limit number of entires (happens before asset import and processing)
outputContentType: "markdown", // --format (use `contentType` prior to v1.0.20)
inputContentType: undefined, // this overrides content type detection to determine eligibility for markdown output (one of: "html", "text")
});
await importer.toFiles(entries);
importer.logResults();
FAQs
Utility to import content from multiple services (and a CLI, too)
The npm package @11ty/import receives a total of 83 weekly downloads. As such, @11ty/import popularity was classified as not popular.
We found that @11ty/import demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.