
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@dotuix/cli
Advanced tools
dotuix— CLI for creating, packing, validating, and signing.uixfiles.
npm install -g @dotuix/cli
dotuix init [name] # blank scaffold
dotuix init [name] -t restaurant|catalog|portfolio # start from a starter template
dotuix pack <dir> # pack folder → .uix
dotuix pack <dir> -o dist/ # pack to a specific output path
dotuix unpack <file.uix> # unpack → folder
dotuix validate <file.uix> # structural + offline-first checks
dotuix info <file.uix> # print manifest fields
dotuix export <file.uix> --type order # export state records
dotuix export <file.uix> --type order --format csv -o orders.csv
dotuix keygen # generate an Ed25519 key pair
dotuix keygen -o ministry-key # named output (ministry-key.priv / .pub)
dotuix sign <file.uix> --key private.key # sign with Ed25519
dotuix verify <file.uix> # verify signature
dotuix encrypt <file.uix> --pin "1234" -o locked.uix # AES-256-GCM encrypt files
# Scaffold a new project from a starter template
dotuix init my-menu -t restaurant
cd my-menu
# Edit manifest.json, index.html, style.css, app.js as needed, then:
dotuix pack .
dotuix validate my-menu.uix
dotuix validate — offline-first checksIn addition to structural validation (manifest fields, entry file, database schema), validate performs static analysis looking for external dependencies that would silently fail on an offline kiosk:
src, href, url() (http://, https://, //)fetch() / XMLHttpRequest calls to non-relative URLs$ dotuix validate myshop.uix
✓ manifest.json valid
✓ entry index.html found
✓ data.db schema correct
⚠ External URL in index.html:34 — https://fonts.googleapis.com/...
Network is blocked. This asset will fail to load at runtime.
✗ 1 offline violation found
dotuix export — get data outReads state.db from inside the .uix file, filters records by --type, and writes flat JSON or CSV. This is the primary way for non-technical users to get their app's state data into Excel or accounting software.
dotuix export orders.uix --type order --format csv -o orders.csv
dotuix export orders.uix --type order --format json -o orders.json
@dotuix/core — programmatic API (pack, unpack, sign, validate)@dotuix/vite-plugin — build React/Vue/Svelte/TS apps as .uixMIT License
FAQs
CLI for packing, unpacking, and validating .uix files
We found that @dotuix/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.