
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
@g-1/workflow
Advanced tools
G1 Enterprise Workflow System. Badass, production-ready release automation that serves as the backbone for major development organizations. Features intelligent error recovery, beautiful UI, and enterprise-scale reliability.
🚀 Enterprise-Grade Workflow Automation System
A badass, production-ready CLI tool that serves as the backbone for major development organizations. Built for teams that demand reliability, beautiful UX, and enterprise-scale automation.
The optimized error recovery service is centralized in @g-1/util/workflow for reusability and performance.
import { OptimizedErrorRecoveryService } from '@g-1/util/workflow'
const recovery = new OptimizedErrorRecoveryService()
const workflow = recovery.createRecoveryWorkflow('build')
await recovery.executeWorkflow(workflow)
This workflow tool could easily be the backbone of a major development organization's release process.
The combination of automation, error recovery, beautiful UX, and professional reliability makes it production-ready for any scale.
# Install globally (recommended)
bun install -g @g-1/workflow
# Or use in project
bun add --dev @g-1/workflow
# Also available via npm/yarn/pnpm
npm install -g @g-1/workflow
# Interactive release workflow (recommended)
workflow release
# → Prompts for deployment targets (npm, Cloudflare)
# → Handles uncommitted changes interactively
# → Executes complete release pipeline
# Release with specific version bump
workflow release --type minor
# Skip specific deployments via CLI flags
workflow release --skip-cloudflare --skip-npm
# Force release with uncommitted changes
workflow release --force
# Non-interactive mode (for CI/CD)
workflow release --non-interactive --skip-cloudflare --skip-npm
# Show workflow status
workflow status
workflow releaseExecute the complete release workflow with interactive configuration:
🔧 Deployment Configuration
----------------------------------------
✔ 📦 Publish to npm registry? (y/N) · true
⚠️ Uncommitted changes detected:
- README.md
? How would you like to handle uncommitted changes? › 📝 Commit all changes now
✅ Changes committed
✔ Quality Gates
✔ Auto-fix linting issues - ✅ Fixed
✔ Type checking - ✅ Passed
✔ Running tests - ✅ No tests found (skipping)
✔ Git repository analysis - ✅ g-1-repo/workflow on main
✔ Version calculation - ✅ 2.10.1 → 2.11.0 (minor)
✔ Deployment configuration - ✅ Will deploy to: npm
✔ Release execution
✔ Update package.json version - ✅ 2.11.0
✔ Generate changelog - ✅ CHANGELOG.md updated
✔ Commit release changes - ✅ chore: release v2.11.0
✔ Create git tag - ✅ v2.11.0
✔ Push to remote - ✅ Complete
✔ Build project - ✅ Build complete
↓ Deploy to Cloudflare [SKIPPED]
✔ Publish to npm - ✅ v2.11.0 published (you may need to interact with prompts)
✔ Create GitHub release - ✅ v2.11.0 released
🎉 Release completed successfully!
📦 Version: 2.10.1 → 2.11.0
📂 Repository: g-1-repo/workflow
Options:
--type <patch|minor|major> - Force specific version bump--skip-tests - Skip test execution--skip-lint - Skip linting step--skip-cloudflare - Skip Cloudflare deployment (or use interactive prompt)--skip-npm - Skip npm publishing (or use interactive prompt)--non-interactive - Run without prompts (for CI/CD environments)--force - Skip uncommitted changes check--dry-run - Show what would be done without executing (coming soon)--verbose - Show detailed outputworkflow aiAI-powered development assistance with intelligent analysis:
# Generate changelog from git commits
workflow ai changelog # Analyze recent commits
workflow ai changelog --since HEAD~10 # Analyze last 10 commits
workflow ai changelog --format json # Output in JSON format
workflow ai changelog --dry-run # Preview without writing
# Get AI version bump suggestions
workflow ai version # Analyze changes and suggest version
workflow ai version --dry-run # Preview suggestions only
# Analyze cross-package impact
workflow ai impact # Analyze impact of recent changes
workflow ai impact --since HEAD~5 # Analyze specific commit range
AI Changelog Features:
Version Analysis:
Impact Analysis:
workflow frameworkFramework detection and deployment strategy recommendations:
# Detect frameworks in current project
workflow framework detect # Scan for frameworks
workflow framework detect --json # Output in JSON format
# Get deployment recommendations (coming soon)
workflow framework deploy # AI-powered deployment suggestions
Framework Detection Features:
Supported Frameworks:
workflow initInitialize a new project with Git setup and workflow configuration:
workflow init # Interactive setup
workflow init --skip-git # Skip Git initialization
workflow init --skip-config # Skip configuration setup
workflow init --force # Overwrite existing configuration
Features:
.go-workflow.config.js with project defaultsworkflow statusShow project and workflow status.
Use as a library in your Node.js applications:
import {
createReleaseWorkflow,
createTaskEngine,
createWorkflow,
quickRelease,
AIService,
FrameworkDetector
} from '@g-1/workflow'
// Quick release with interactive prompts
await quickRelease()
// AI-powered development assistance
const aiService = new AIService()
const changelog = await aiService.generateChangelog(commits)
const versionSuggestions = await aiService.suggestVersionBumps(changes, packages)
const impact = await aiService.analyzeImpact(changes, packages)
// Framework detection
const detector = new FrameworkDetector()
const frameworks = await detector.detectAllFrameworks()
const recommendations = detector.getDeploymentRecommendations(frameworks)
// Custom workflow creation
const workflow = createWorkflow('custom-deploy', [
{
title: 'Build Application',
task: async () => {
// Custom build logic
}
},
{
title: 'Deploy to Production',
task: async () => {
// Custom deployment logic
}
}
])
await workflow.run()
await quickRelease({ type: 'minor' })
// Custom workflow (note: createReleaseWorkflow is now async) const steps = await createReleaseWorkflow({ skipTests: true, nonInteractive: true, // Skip prompts for programmatic use skipCloudflare: true, skipNpm: true }) const engine = createTaskEngine({ showTimer: true }) const result = await engine.execute(steps)
// Build custom workflows const customWorkflow = createWorkflow('deploy') .step('Build', async (ctx, helpers) => { helpers.setOutput('Building application...') // Your build logic }) .step('Deploy', async (ctx, helpers) => { helpers.setOutput('Deploying to production...') // Your deploy logic }) .build()
## ⚙️ Configuration
Create `.go-workflow.config.js` in your project root:
```javascript
export default {
project: {
type: 'library', // 'library' | 'cli' | 'web-app' | 'api'
packageManager: 'bun' // 'bun' | 'npm' | 'yarn' | 'pnpm'
},
git: {
defaultBranch: 'main',
autoInit: true,
branchNaming: {
feature: 'feature/{name}',
bugfix: 'bugfix/{name}',
hotfix: 'hotfix/{name}'
}
},
deployments: {
npm: {
enabled: true,
access: 'public'
},
cloudflare: {
enabled: true,
buildCommand: 'npm run build'
}
},
github: {
autoRelease: true,
pullRequests: {
autoMerge: true,
deleteBranch: true
}
},
errorHandling: {
autoFix: true,
interactive: true,
retryAttempts: 3
},
cli: {
showProgress: true,
colorOutput: true,
verboseLogging: false
},
features: {
frameworkDetection: {
enabled: true,
workspacePatterns: ['packages/*', 'apps/*', 'docs']
},
aiAssistance: {
enabled: true,
provider: 'openai', // 'openai' | 'anthropic' | 'local'
model: 'gpt-4',
features: {
changelog: true,
versionSuggestions: true,
impactAnalysis: true
}
}
},
}
Project Settings
project.type: Project type for optimized workflowsproject.packageManager: Preferred package managerGit Configuration
git.defaultBranch: Default branch name (default: 'main')git.autoInit: Auto-initialize Git repository (default: true)git.branchNaming: Branch naming conventionsError Handling
errorHandling.autoFix: Enable automatic error fixes (default: true)errorHandling.interactive: Show interactive error recovery options (default: true)errorHandling.retryAttempts: Number of retry attempts for failed operations (default: 3)CLI Options
cli.showProgress: Show progress indicators (default: true)cli.colorOutput: Enable colored output (default: true)cli.verboseLogging: Enable verbose logging (default: false)Features Configuration
features.frameworkDetection.enabled: Enable framework detection (default: true)features.frameworkDetection.workspacePatterns: Patterns to scan for frameworksfeatures.aiAssistance.enabled: Enable AI-powered features (default: true)features.aiAssistance.provider: AI provider ('openai', 'anthropic', 'local')features.aiAssistance.model: AI model to usefeatures.aiAssistance.features: Individual AI feature togglesHooks System
hooks.beforeRelease: Commands to run before releasehooks.afterRelease: Commands to run after releasehooks.onError: Commands to run on errorThe workflow system supports multiple configuration formats:
.go-workflow.config.js (ES modules).go-workflow.config.ts (with ts-node).go-workflow.config.json"workflow" field in package.jsonConfiguration files are loaded in order of preference, with later files overriding earlier ones.
gh command)Install once, use everywhere. Same commands and behavior across all your projects with enterprise-grade reliability.
Enforces code quality before any release with intelligent error recovery:
Comprehensive error handling system with intelligent recovery:
This is an enterprise-grade TypeScript workflow automation tool with a modular architecture:
Core Engine (src/core/)
TaskEngine - Native listr2 integration for beautiful progress UI, hierarchical tasks, concurrent execution supportGitStore - Complete Git operations wrapper using simple-git, includes AI-powered suggestions for branch names and commit messagesWorkflow System (src/workflows/)
ReleaseWorkflow - Multi-stage release pipeline: Quality Gates → Git Operations → DeploymentsPlugin Architecture (src/plugins/)
Task Orchestration
Git-First Design
Enterprise Features
Error Handling Strategy
We welcome contributions! Please see our Contributing Guide for details.
MIT © G1
This badass enterprise workflow system represents the pinnacle of release automation technology.
The combination of:
Makes this production-ready for any scale and suitable as the backbone of major development organizations.
Built with ❤️ for enterprise development teams who demand excellence 🚀
FAQs
G1 Enterprise Workflow System. Badass, production-ready release automation that serves as the backbone for major development organizations. Features intelligent error recovery, beautiful UI, and enterprise-scale reliability.
The npm package @g-1/workflow receives a total of 19 weekly downloads. As such, @g-1/workflow popularity was classified as not popular.
We found that @g-1/workflow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.