New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
Get Started

@flisk-sh/flisk-import

Package Overview
Dependencies
Maintainers
2
Versions
5
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@flisk-sh/flisk-import

Import services from a repository's root docker-compose.yml into Flisk service.json files.

latest
Source
npmnpm
Version
0.3.0
Version published
Weekly downloads
0
Maintainers
2
Weekly downloads
 
Created
Source

flisk import

Import the services in a repo's root docker-compose.yml into Flisk as service.json files. This is the Compose first tier of flisk-sh/flisk#511.

flisk import . --dry-run     # plan only
flisk import .               # plan, then ask before writing
flisk import . --yes         # write service.json files and project setup

What to expect

  • Reads one file: the root docker-compose.yml. Not compose.yaml, override files, nested Compose files, Dockerfiles on their own, package.json, or Procfiles.
  • Writes: one bring-your-own service.json per Compose service, plus .flisk/project.json if the repo is not a Flisk project yet. It never edits the Compose file or overwrites a service.json without --force.
  • Keeps: the service names (db stays db, so it stays the hostname), the build context and Dockerfile (or the image), the container port as written (3000, 80, 5432), depends_on, and an HTTP health path. Databases and brokers are private, with no proxy route.
  • Environment: names go into service.json as secrets.required; literal values are copied to the project .env, which is added to .gitignore. Values in .env already are kept, and ${VAR} values are left for you.
  • Drops, and says so: volumes, command, env_file and every other untranslated key; services with profiles, extends, an out-of-tree build or a ${VAR} image.
  • Does not start anything. Run flisk up with Flisk core 1.4.11 or later. The importer does not check the core version.
  • Exit codes: 0 when the plan succeeds (--dry-run, files written, or all service.json files already exist), 1 when no root docker-compose.yml or mappable service is found, and 2 when the write prompt is declined or closed without an answer (Nothing written.).

See docs/import.md for the full mapping and limits. flisk import is the core CLI command backed by this package.

bun install && bun run build && bun run test

Publishing

flisk-import is published to npmjs.org by the workflow in .github/workflows/publish-npm.yml, triggered by a GitHub release. It uses npm trusted publishing (OIDC), so no long-lived npm token lives in this repository. The package is published under two names: the unscoped flisk-import and the scoped @flisk-sh/flisk-import (the same archive with the name rewritten in the packed manifest).

One-time owner setup

A trusted publisher has to exist on npm before the first OIDC publish succeeds, and it is configured per package name:

  • Open the package on npmjs.com → Settings → Trusted Publisher → GitHub Actions
  • Fill in:
    • Organization: flisk-sh
    • Repository: flisk-import
    • Workflow filename: publish-npm.yml
    • Allowed actions: npm publish
  • Repeat for @flisk-sh/flisk-import once that package exists

The same thing from the command line, for either name:

npm trust github flisk-import --file publish-npm.yml --repo flisk-sh/flisk-import --allow-publish
npm trust list flisk-import

The first version

A package's first version cannot be published through OIDC — npm has no trusted publisher for a name that does not exist yet. Version 0.2.2 was therefore published once with a token; every version after that publishes over OIDC from the release workflow.

FAQs

Package last updated on 28 Oct 2026

Related posts