Security News
Opengrep Emerges as Open Source Alternative Amid Semgrep Licensing Controversy
Opengrep forks Semgrep to preserve open source SAST in response to controversial licensing changes.
By Sarah Gooding - Jan 28, 2025
New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More →
@automattic/vip
Advanced tools
VIP-CLI is your tool for interacting with and managing your VIP applications.
Getting started
First, install the package:
npm install -g @automattic/vip
The above command may fail in linux if you do not have make and g++ installed. In that case, install them first:
sudo apt install make g++
Then, launch the command and follow the prompts:
vip
If you need more information, check out our VIP-CLI documentation.
Contributing
For help with contributing to this project, including instructions for local development, please see CONTRIBUTING and SECURITY.
Analytics
By default, we record information about the usage of this tool using an in-house analytics sytem. If you would prefer to opt-out of this data collection, you can do so via the DO_NOT_TRACK environment variable. You may either export it in your shell configuration or specify it on the command line (e.g. DO_NOT_TRACK=1 vip app list).
FAQs
The VIP Javascript library & CLI
The npm package @automattic/vip receives a total of 497 weekly downloads. As such, @automattic/vip popularity was classified as not popular.
We found that @automattic/vip demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Package last updated on 27 Jul 2023
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
By Sarah Gooding - Jan 24, 2025
Security News
cURL Project and Go Security Teams Reject CVSS as Broken
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
By Sarah Gooding - Jan 24, 2025