
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@billpeet/yt-cli
Advanced tools
A YouTrack CLI tool designed for AI agent use and developer workflows. Outputs JSON by default, accepts all input via flags (no interactive prompts), and has no native binary dependencies.
npm install -g @billpeet/yt-cli
Or run locally without installing:
npm run build
node bin/yt.js --help
Authenticate against your YouTrack instance:
yt setup --url https://yourcompany.youtrack.cloud --token perm:yourtoken
This validates the connection by calling /api/users/me, then saves credentials to ~/.config/yt-cli/config.json.
Override or replace the config file at any time:
| Variable | Description |
|---|---|
YOUTRACK_BASE_URL | YouTrack base URL |
YOUTRACK_TOKEN | YouTrack permanent API token |
Environment variables take priority over the config file.
yt setupyt setup --url <url> --token <token>
yt issue search <query>Search issues using YouTrack query syntax.
yt issue search "project: FOO #Unresolved"
yt issue search "assignee: me #Unresolved" --top 10
yt issue search "project: FOO" --fields "id,idReadable,summary"
Options:
--top <n> — Max results (default: 50)--skip <n> — Offset for pagination (default: 0)--fields <fields> — Comma-separated field list--format text — Human-readable output--pretty — Pretty-print JSONyt issue get <id>yt issue get FOO-123
yt issue get FOO-123 --fields "id,idReadable,summary,description"
yt issue createyt issue create --project FOO --summary "Bug: login fails on Safari"
yt issue create --project FOO --summary "Feature request" --description "Details here"
Note: --project accepts the project short name (e.g. FOO) or the internal project ID.
yt issue update <id>yt issue update FOO-123 --summary "Updated title"
yt issue update FOO-123 --description "New description"
yt issue update FOO-123 --field "State=In Progress" --field "Priority=High"
--field can be repeated for multiple custom fields. Format: FieldName=Value.
yt issue comments <id>yt issue comments FOO-123
yt issue comment <id>yt issue comment FOO-123 --text "This is fixed in v2.1"
yt project listyt project list
yt project list --fields "id,shortName,name,description"
yt user meyt user me
All commands output raw JSON to stdout. Errors go to stderr as {"error": "..."}.
# Pipe into jq for filtering
yt issue search "project: FOO" | jq '.[].idReadable'
# Get just the summary of one issue
yt issue get FOO-123 | jq '.summary'
yt issue get FOO-123 --pretty
yt issue search "project: FOO" --format text
yt project list --format text
yt user me --format text
| Code | Meaning |
|---|---|
0 | Success |
1 | Error (API failure, missing config, invalid input) |
yt-cli is designed to be called directly by AI agents like Claude Code. JSON output with no interactive prompts makes it easy to parse and chain:
# Find unresolved issues assigned to me
yt issue search "assignee: me #Unresolved" --top 5
# Get full details of a specific issue
yt issue get PROJ-42
# Create an issue and capture the new ID
NEW=$(yt issue create --project PROJ --summary "Auto-created issue" | jq -r '.idReadable')
echo "Created $NEW"
# Add a comment
yt issue comment "$NEW" --text "Investigated and confirmed."
# Run from source (no build step)
npm run dev -- issue search "project: FOO"
# Build TypeScript
npm run build
# Run built binary
node bin/yt.js --help
Config is stored at ~/.config/yt-cli/config.json.
FAQs
YouTrack CLI tool for AI agent and developer use
We found that @billpeet/yt-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.