
Product
Introducing Webhook Events for Alert Changes
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.
@esy-ocaml/esyb
Advanced tools
A package builder for esy.
A single command esyb operates on a build description, it allows to:
esyb build command.esyb shell.esyb exec -- <command>.Build description is a JSON files with the information about a package's build environment and commands needed to build the package and install its artifacts to the store.
Example:
{
"id": "pkg-1.0.0-somehash",
"name": "pkg",
"version": "1.0.0",
"sourceType": "immutable",
"buildType": "_build",
"build": [
["jbuilder", "build"]
],
"install": [
["jbuilder", "install"]
],
"sourceDir": "%sandbox%",
"stageDir": "%localStore%/s/name",
"installDir": "%localStore%/i/name",
"buildDir": "%localStore%/b/name",
"env": {
"cur__name": "pkg",
"cur__install": "%localStore%/s/name",
...
}
}
Usually you get those build description from esy.
Note that some properties are allowed to use %name% variables:
%sandbox% — the absolute path to the sandbox.%store% — the absolute path to the store.%localStore% — the absolute path to the sandbox-local store.This is needed to allow build descriptions not to be tied to a concrete host.
Examples:
Build the project using $PWD/build.json description:
% esyb build
Build the project using the specified build description:
% esyb build -B build-merlin.json
Build description can also be read from stdin (useful for automatically generated build descriptions):
% cat build-merlin.json | esyb build -B -
rsync executableinstall esy, install dependencies and build:
% npm install -g esy
% make install build-dev
Then you can test it:
% esy x esyb
Things to consider:
package.json contains npm metadata for a dist package, you can bump version
in there using npm version patch|minor|major or othewise edit it however you
need. Note that the list of files in to be included in the dist is also
hardcoded in Makefile.
postinstall.sh contains a list of instructions to be performed after the
installation.
Produce a ready to be published release package within the dist/ directory:
% make dist
Publish it:
% cd dist/
% npm publish
FAQs
Package builder for esy
We found that @esy-ocaml/esyb demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.