Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@devvit/cli
Advanced tools
Check out devvit instead!
Sign up for Reddit's Developer Platform here!
devvit
is the command line interface to the Reddit Developer Platform
More on available commands: CLI docs
You can run the local version of devvit
called mydevvit
.
It uses your local source code instead of the one published to NPM.
You need to run a few commands to make it work on your computer:
Start in the repo root
yarn && yarn build
cd packages/cli
yarn install:dev
source ~/.zshrc
(or restart your terminal)These commands ensure you have the mydevvit
command available in your console. During later
development, you'll only need to rebuild sources to use mydevvit
.
For CLI-only changes, running yarn build
in packages/cli
is enough. Make sure to run
yarn && yarn build
in the repo root after pulling from the remote or making changes outside of
packages/cli
!
Devvit CLI interacts with the Dev Portal API, which at present cannot be run locally. As a result,
to run mydevvit
, you'll need to tell it to point at the production version of the API like this:
MY_PORTAL=0 mydevvit [command] # executes [command] using your local devvit cli, but production backend
FAQs
Reddit's Dev Platform CLI Tool
The npm package @devvit/cli receives a total of 312 weekly downloads. As such, @devvit/cli popularity was classified as not popular.
We found that @devvit/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.