
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@gb-lerna/cli
Advanced tools
[](http://www.typescriptlang.org/) [](https://npmjs.com/package/@gb-lerna/cli)
Create and maintain a Lerna monorepo with Typescript.
npm install -g @gb-lerna/cli
mkdir sample-project
cd sample-project
git init
gb-lerna repo @sample/website
gb-lerna package @sample/api
gb-lerna package @sample/admin
gb-lerna module --kind values personnel @sample/admin
gb-lerna module --kind class student @sample/admin
npm install
lerna bootstrap
lerna add @sample/api --scope @sample/website
lerna add @sample/api --scope @sample/admin
npm test
cd your-app
gb-lerna package @sample/tools
create a new monorepo with initial package
Options:
-i, --independent version packages independently
-h, --help display help for command
create a new package
Options:
-h, --help display help for command
create a new class or funtions module
Optionally you can prepend a path to the name argument such as path/to/name.
Use --kind class to create a JavaScript class and test. Use --kind values (the default) to create a new module for exporting functions, objects or primitive values and a test for the module.
Options:
-k, --kind <kind> the kind of module (choices: "class", "values")
--no-test skip spec file
-h, --help display help for command
print out a markdown table listing the packages in your monorepo.
Options:
-v, --verbose verbose output
-h, --help display help for command
Options:
-V, --version output the version number
-f, --force use force on schematics
-d, --dryRun dry run only
-h, --help display help for command
Commands:
repo [options] [initialPackage] create a new monorepo with initial package
package <name> create a new package
module [options] <name> [scope] create a new class or module
info [options] print information about your lerna repo
help [command] display help for command
FAQs
[](http://www.typescriptlang.org/) [](https://npmjs.com/package/@gb-lerna/cli)
We found that @gb-lerna/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.