Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@begin/deploy
Advanced tools
[![GitHub CI status](https://github.com/beginner-corp/cli/workflows/Node%20CI/badge.svg)](https://github.com/beginner-corp/cli/actions?query=workflow%3A%22Node+CI%22)
Install the Begin CLI by opening your terminal and entering the following command:
curl -sS https://dl.begin.com/install.sh | sh
$PATH
.iwr https://dl.begin.com/install.ps1 -useb | iex
By default Begin installs to ~/.begin/
(Mac, Linux) / $Home\.begin\
(Windows). You can specify a custom directory to install to by using the BEGIN_INSTALL
environment variable:
BEGIN_INSTALL=/whatever/path/here curl -sS https://dl.begin.com/install.sh | sh
$env:BEGIN_INSTALL="c:\whatever\path\here"; iwr https://dl.begin.com/install.ps1 -useb | iex
Alternatively, you can install Begin with npm: npm i -g @begin/cli
.
Be sure to set the following environment variables:
export DEPLOY=main
export BEGIN_CLI_CLIENT_ID_STAGING=<your staging ID>
export BEGIN_CLI_CLIENT_ID_PRODUCTION=<your production ID>
Note for Windows users:
begin
is a reserved word in PowerShell, so in Windows Begin isb.exe
. Any documented references to runningbegin
should be interpreted as runningb
in Windows.
begin
to see your list of available commandshelp
anywhere in your command will always display relevant help (like -h
or --help
flags); for example:
begin dev help
is equivalent to begin help dev
or begin dev -h
--no-color
flag, or with the following env vars: BEGIN_NO_COLOR
, NO_COLOR
, or by setting TERM
to dumb
--json
)Setting the --json
flag sets the output mode to JSON, intended for use with modern JSON-based workflows using tools like jq
.
As such, final JSON output is always sent to stdout
, even in the event of an error. Additionally, all ANSI colorization is automatically stripped from JSON output.
Successful execution:
ok
(boolean): always true
message
(string): always be present, but may be empty (""
)begin version
will output begin
(executable path) and version
(semver string) properties)Unsuccessful execution
ok
(boolean): always false
error
(string): message of the errorstack
(string): stack trace of the error; only present if --debug
flag is setBegin has two release channels:
latest
(default) - well-hardened production releases following semvermain
- the newest stuff (on the main
branch, hence the name), not yet released to productionTo install main directly, run:
curl -s https://dl.begin.com/install.sh | sh -s main
$v="main"; iwr https://dl.begin.com/install.ps1 -useb | iex
If you already have Begin installed, to switch to main
from latest
run: begin update --use main
.
Similarly, to switch back to latest
from main
, run: begin update --use latest
.
Wherever possible, the Begin CLI adheres to the Command Line Interface Guidelines.
Begin is async/await
/ Promises
-based. It is currently CommonJS, with plans to eventually refactor to ESM.
Begin is written in idiomatic JavaScript with a key exception: each command's specific require()
statements are in local scope, not global. This is specifically and deliberately done to reduce the coldstart time and ensure every execution runs as fast as possible.
FAQs
[![GitHub CI status](https://github.com/beginner-corp/cli/workflows/Node%20CI/badge.svg)](https://github.com/beginner-corp/cli/actions?query=workflow%3A%22Node+CI%22)
The npm package @begin/deploy receives a total of 7 weekly downloads. As such, @begin/deploy popularity was classified as not popular.
We found that @begin/deploy demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.