Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@hexagon/pup
Advanced tools
Powerful universal process manager, designed to keep your scripts, applications and services alive.
Pup is a powerful universal process manager developed with JavaScript, designed to keep your scripts, applications and services alive.
For detailed documentation, visit pup.56k.guru.
Note: Programmatic usage, process telemetry, and IPC are currently available only when running Deno client processes.
To install Pup, make sure you run the latest version of your runtime environment, then open your terminal and execute the following command:
Deno:
deno run -Ar jsr:@pup/pup@1.0.0-rc.45 setup --channel prerelease
This command downloads the latest version of Pup and installs it on your system. The --channel prerelease
option is included as there is no stable version of Pup yet. Read more abour release
channels here.
Pup revolves around instance configuration files, where each managed process belongs to an instance defined by a pup.json
. This file can either be created manually, or by the command line helpers
used below:
To create a simple instances running a single process:
pup init --id "my-server" --autostart --cmd "deno run -A server.ts"
If you intend to create multiple pup instances on the same server, you can pass an instance name through --name my-instance-name
. This name will also be used as the system service name.
(Optional) In case you have an additional task to execute, such as a cleanup script, you can make use of pup append
. The following example shows how to add an extra task that use the cron start
policy:
pup append --id "my-task" --cmd "deno run -A task.ts" --cron "0 0 * * * *"
(Optional) Test your instance by running it foreground using pup run
(exit by pressing CTRL+C):
To make your instance run at boot, enable it using pup enable-service
.
Will by default use the instance name for service name, which defaults to pup
. You can override by passing -n my-custom-name
.
To stream the logs from a running instance, use the command pup monitor
. To show historic logs, use pup logs
.
Will by default use the instance name for service name, which defaults to pup
. You can override by passing -n my-custom-name
.
For the full manual, see https://pup.56k.guru
It is also possible to use pup to keep a process alive temporary, without a pup.json
or system service.
To achieve this, use pup run
with --cmd
and a start policy.
pup run --autostart --cmd "deno run server.ts"
Full examples available at /docs/src/examples
stable
: This channel is currently empty, but will provide stable releases of Pup in the future. It is recommended for production environments where stability is a priority.
prerelease
: This channel offers pre-release versions of Pup that include new features and improvements. It is suitable for users who want to test the latest enhancements before they are officially
released.
canary
: The canary channel provides the most up-to-date and cutting-edge versions of Pup. It includes the latest changes and may not be as stable as the other channels. It is primarily intended
for developers and early adopters who want to stay on the bleeding edge of Pup's development. Based on the current state of the main
repo of the github repository.
Note Built-in plugins, such as splunk-hec and webinterace does not work with canary versions right now.
Each channel serves different purposes, so choose the one that best fits your needs and requirements.
Contributions to Pup are very welcome! Please read the contributing section of the manual, fork the repository, make your changes, and submit a pull request.
We appreciate all feedback and contributions that help make Pup better!
FAQs
Powerful universal process manager, designed to keep your scripts, applications and services alive.
The npm package @hexagon/pup receives a total of 0 weekly downloads. As such, @hexagon/pup popularity was classified as not popular.
We found that @hexagon/pup demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.