New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

@gentleduck/cli

Package Overview
Dependencies
Maintainers
1
Versions
13
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@gentleduck/cli

CLI to add gentleduck/ui components and bootstrap integrations.

latest
Source
npmnpm
Version
1.3.0
Version published
Weekly downloads
13
-89.84%
Maintainers
1
Weekly downloads
 
Created
Source

@gentleduck/cli

CLI for initializing duck-ui config and installing/updating/removing registry components.

Install

npx @gentleduck/cli --help

Commands

npx @gentleduck/cli init [components...]
npx @gentleduck/cli add [components...]
npx @gentleduck/cli update [components...]
npx @gentleduck/cli remove [components...]
npx @gentleduck/cli diff [components...]

Monorepo Workspace Targeting

When duck-ui.config.json has "monorepo": true, the CLI resolves target paths from the config workspace field.

You can override the target workspace per command:

npx @gentleduck/cli add button --workspace apps/web
npx @gentleduck/cli update --all --workspace apps/web
npx @gentleduck/cli diff button --workspace apps/web

For init:

npx @gentleduck/cli init --monorepo --workspace apps/web

The CLI validates the workspace target:

  • package.json must exist
  • tsconfig.json must exist for component commands

Migration

Legacy duck-ui.config.json files (without workspace) are rejected.

Re-run init to migrate:

npx @gentleduck/cli init

Release Workflow

This repo uses Changesets for versioning and publishing.

  • Add a changeset for CLI changes:
bun run changeset
  • Update versions/changelogs:
bun run version-packages
  • Validate package before publish:
bun run --cwd packages/duck-cli test
bun run --cwd packages/duck-cli build
  • Publish (repo-level script):
bun run release

Keywords

components

FAQs

Package last updated on 14 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts