
Company News
Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.
@halo-dev/cli
Advanced tools
A command-line tool for managing Halo instances.
npm install -g @halo-dev/cli
The installed binary is:
halo
Check the version:
halo --version
>= 22halo auth login \
--profile local \
--url http://127.0.0.1:8090 \
--auth-type bearer \
--token <your-token>
Before using Basic Auth, make sure your Halo instance enables it.
Start Halo with:
--halo.security.basic-auth.disabled=false
Then login:
halo auth login \
--profile local \
--url http://127.0.0.1:8090 \
--auth-type basic \
--username admin \
--password <your-password>
halo auth current
halo auth profile list
Get help:
halo --help
halo auth --help
halo post --help
halo single-page --help
Example root help output:
halo/1.0.0
Usage:
$ halo <command> [options]
Commands:
auth Authentication commands
post Post management commands
single-page Single page management commands
search Search public site content
plugin Plugin management commands
theme Theme management commands
attachment Attachment management commands
backup Backup management commands
moment Moment management commands
comment Comment management commands
notification Notification management commands
For more info, run any command with the `--help` flag:
$ halo auth --help
$ halo post --help
$ halo single-page --help
$ halo search --help
$ halo plugin --help
$ halo theme --help
$ halo attachment --help
$ halo backup --help
$ halo moment --help
$ halo comment --help
$ halo notification --help
Options:
-h, --help Display this message
-v, --version Display version number
Use a specific saved profile:
halo post list --profile production
Use JSON output for scripting:
halo post list --json
halo single-page get about --json
Enable shell completion:
For bash:
eval "$(halo completion bash)"
For zsh:
eval "$(halo completion zsh)"
After enabling completion, you can use Tab to complete commands such as:
halo <TAB>
halo auth <TAB>
halo comment reply <TAB>
Halo CLI currently includes these command groups:
authpostsingle-pagesearchpluginthemeattachmentbackupmomentcommentnotificationFor details on any command, use --help.
This package also ships with reusable skills under the root skills/ directory.
Included skills:
halo-clihalo-cli-sharedhalo-cli-authhalo-cli-contenthalo-cli-searchhalo-cli-operationshalo-cli-moderation-notificationsAdd the skills with:
npx skills add halo-dev/cli
Recommended starting point after installation:
skills/halo-cli/SKILL.md
Profile metadata is stored in:
$HALO_CLI_CONFIG_DIR/config.json if HALO_CLI_CONFIG_DIR is set$XDG_CONFIG_HOME/halo/config.json~/.config/halo/config.jsonCredentials are stored in the system keyring.
Useful commands:
pnpm typecheck
vp lint
vp test
vp pack
Before publishing, verify the package contents:
npm pack --dry-run
Create a release version locally without publishing to npm:
vp run release
vp run release:dry
This uses release-it to bump the version, create a release commit and git tag, push them upstream, and create a GitHub Release.
It does not publish the package to npm.
The published package should include:
dist/skills/README.mdLICENSEMIT
FAQs
CLI for managing Halo (https://www.halo.run) instances.
The npm package @halo-dev/cli receives a total of 75 weekly downloads. As such, @halo-dev/cli popularity was classified as not popular.
We found that @halo-dev/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.

Research
/Security News
A long-running Go typosquat impersonated the popular shopspring/decimal library and used DNS TXT records to execute commands.

Research
Active npm supply chain attack compromises @antv packages in a fast-moving malicious publish wave tied to Mini Shai-Hulud.