Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
@arethetypeswrong/cli
Advanced tools
A CLI wrapper for arethetypeswrong.
npm i -g @arethetypeswrong/cli
The attw
command acts very similarly to arethetypeswrong.github.io, with some additional features that are useful for command line usage.
The CLI can check an npm pack
ed tarball:
npm pack
attw cool-package-1.0.0.tgz
# or
attw $(npm pack)
or pack one in-place by specifying --pack
and a directory:
attw --pack .
or check a package from npm:
attw --from-npm @arethetypeswrong/cli
attw
supports a JSON config file (by default named .attw.json
) which allows you to pre-set the command line arguments. The options are a one-to-one mapping of the command line flags, changed to camelCase, and are all documented in their relevant Options
section below.
Show help information and exit.
In the CLI: --help
, -h
attw --help
Print the current version of attw
and exit.
In the CLI: --version
, -v
attw --version
Specify a directory to run npm pack
in (instead of specifying a tarball filename), analyze the resulting tarball, and delete it afterwards.
attw --pack .
Specify the name (and, optionally, version range) of a package from the NPM registry instead of a local tarball filename.
In the CLI: --from-npm
, -p
attw --from-npm <package-name>
In the config file, fromNpm
can be a boolean value.
The format to print the output in. Defaults to auto
.
The available values are:
table
, where columns are entrypoints and rows are resolution kindstable-flipped
, where columns are resolution kinds and rows are entrypointsascii
, for large tables where the output is clunkyauto
, which picks whichever of the above best fits the terminal widthjson
outputs the raw JSON data (overriding all other rendering options)In the CLI: --format
, -f
attw --format <format> <file-name>
In the config file, format
can be a string value.
attw
automatically discovers package entrypoints by looking at package.json exports
and subdirectories with additional package.json files. This automatic discovery process can be overridden with the --entrypoints
option, or altered with the --include-entrypoints
and --exclude-entrypoints
options:
attw --pack . --entrypoints . one two three # Just ".", "./one", "./two", "./three"
attw --pack . --include-entrypoints added # Auto-discovered entyrpoints plus "./added"
attw --pack . --exclude-entrypoints styles.css # Auto-discovered entrypoints except "./styles.css"
Specifies rules/problems to ignore (i.e. not raise an error for).
The available values are:
wildcard
no-resolution
untyped-resolution
false-cjs
false-esm
cjs-resolves-to-esm
fallback-condition
cjs-only-exports-default
false-export-default
unexpected-esm-syntax
unexpected-cjs-syntax
In the CLI: --ignore-rules
attw <file-name> --ignore-rules <rules...>
In the config file, ignoreRules
can be an array of strings.
Whether to display a summary of what the different errors/problems mean. Defaults to showing the summary (--summary
).
In the CLI: --summary
/--no-summary
attw --summary/--no-summary <file-name>
In the config file, summary
can be a boolean value.
Whether to print the information with emojis. Defaults to printing with emojis (--emoji
).
In the CLI: --emoji
/--no-emoji
attw --emoji/--no-emoji <file-name>
In the config file, emoji
can be a boolean value.
Whether to print with colors. Defaults to printing with colors (--color
).
The FORCE_COLOR
env variable is also available for use (set is to 0
or 1
).
In the CLI: --color
/--no-color
attw --color/--no-color <file-name>
In the config file, color
can be a boolean value.
When set, nothing will be printed to STDOUT.
In the CLI: --quiet
, -q
attw --quiet <file-name>
In the config file, quiet
can be a boolean value.
The path to the config file. Defaults to ./.attw.json
.
In the CLI: --config-path <path>
attw --config-path <path> <file-name>
Cannot be set from within the config file itself.
FAQs
A CLI tool for arethetypeswrong.github.io
The npm package @arethetypeswrong/cli receives a total of 19,231 weekly downloads. As such, @arethetypeswrong/cli popularity was classified as popular.
We found that @arethetypeswrong/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.