
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@equinor/echo-update
Advanced tools
This is a simple tool for updating echo npm packages, or optionally all npm packages.
Major.Minor.Patch
Log/Output
OPTIONS
-a, --all Will update all packages, not just echo-packages
-d, --dev Will skip update for devDependencies
-e, --peer Will skip update for peerDependencies
-f, --filter=filter Will only update packages matching the filter, example: --filter=*react*
-i, --skipFixed Will skip dialogue and update for new fixed-version
-m, --skipMajor Will skip dialogue and update for new major-version
-o, --optional Will skip update for optionalDependencies
-p, --path=path The path (directory) containing package.json
EXAMPLES
echo-update | update echo packages
echo-update --all | update all packages
echo-update --filter=*jest* | update all packages that includes jest
echo-update -f=jest | only update the jest package
echo-update -a --path="./folder" | only update the jest package
echo-update -a --skipFixed --skipMajor | update all minor- & patch-versions, skip dialogue for major- & fixed-versions
For global
use install package globally and use echo-update in your command line.
$ npm install @equinor/echo-update -g
For global use, navigate to the folder with the package.json and use the following commands.
To update all echo packages
, run:
$ echo-update
For any special cases where one need a specific version one can use one of the following commands. For version select use.
$ echo-update -v
For selecting 'beta' and 'next' version.
$ echo-update -c
For updating all packages
(not just echo), run:
$ echo-update -a
For running it on a different path/directory, run:
$ echo-update --path="../EchoCli/"
For local
use in a specific project.
$ npm install @equinor/echo-update -D
Add scripts
to your package.json
.
{
"scripts": {
// Other scripts...
"echo-update": "echo-update",
"echo-update-version": "echo-update -v",
"echo-update-next": "echo-update -c",
"echo-update-all": "echo-update -a"
}
}
If you install package as dependency then add commands the following to your script section in the package.json
To update the echo packages
, run:
$ npm run echo-update
To update all packages
, run:
$ npm run echo-update-all
First time usage, run following command first:
$ npm install
$ npm run build
$ yalc publish
You can run the script locally with node after a build. Example where it updates all packages for EchoCli using the specified path:
npm run build
node .\lib\index.js --path="../EchoCli/" -a
Remember to add scripts to package.json as described earlier in local
section.
In echo-update:
$ npm run build
$ yalc publish
In your other repository where you want to test this (run both these each time you want to test a different echo-update option):
$ yalc add @equinor/echo-update
$ npm run echo-update-all
You need to run all these commands if you do a change and want to test again.
FAQs
Echo dependency updater
The npm package @equinor/echo-update receives a total of 129 weekly downloads. As such, @equinor/echo-update popularity was classified as not popular.
We found that @equinor/echo-update demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.