
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@datasolace/oath
Advanced tools
A beautiful terminal app for tracking accountability tasks with automated verification scripts, streaks, and analytics
A beautiful terminal app for tracking accountability tasks with automated verification scripts, streaks, and analytics.
Also a primary test project for Claude Code - so beware there will be vibe coding ahead... 🙃
Install globally to use the oath command anywhere:
npm install -g @datasolace/oath
Then run:
oath
Clone and build locally:
git clone https://github.com/DataSolace/oath.git
cd oath
pnpm install
pnpm build
Launch the interactive terminal app:
# If installed globally
oath
# If running from source
pnpm start
This opens a beautiful full-screen interface where you can manage everything through an intuitive menu system.
Use arrow keys to navigate or press hotkeys for quick access:
In the task list view:
Press [D] from the main menu to access analytics:
Press [S] from the main menu to access:
The project includes example verification scripts in example-scripts/:
daily-commits.sh - Checks if you made git commits todayexercise-tracker.sh - Interactive exercise completion trackerAll your data is stored locally in ~/.oath/:
oath.db - SQLite database with your profile, tasks, and completion historybackups/ - Automatic and manual database backupsThe app automatically:
Manage backups through the interactive UI:
Access: Settings → Backup Settings
Or use CLI commands:
pnpm backup:create [optional-label] # Create a manual backup
pnpm backup:list # List all backups
pnpm backup:restore <filename> # Restore from a backup
pnpm backup:config # View/update retention settings
See docs/BACKUPS.md for detailed backup documentation.
Verification scripts should:
chmod +x script.sh)Example script:
#!/bin/bash
if [ some_condition ]; then
echo "Task completed successfully!"
exit 0
else
echo "Task not completed"
exit 1
fi
The analytics dashboard provides comprehensive insights into your productivity:
Navigate between views using hotkeys: [O]verview, [C]ategories, [S]treaks, [P]atterns
Automate task completion verification by attaching shell scripts to tasks. Scripts should:
0 for success, 1 for failurechmod +x script.sh)Example: Check if you made git commits today, tracked exercise, or completed any automated task.
See example-scripts/ for working examples.
If you're contributing to the project:
# Run in development mode
pnpm dev
# Run interactive mode in development
pnpm dev interactive
# Build for production
pnpm build
# Run tests
pnpm test
# Type check
pnpm typecheck
FAQs
A beautiful terminal app for tracking accountability tasks with automated verification scripts, streaks, and analytics
We found that @datasolace/oath demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.