
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@inquirer/password
Advanced tools
@inquirer/passwordInteractive password input component for command line interfaces. Supports input validation and masked or transparent modes.
| yarn | pnpm |
|---|---|
|
|
| bun | deno |
|
|
| npm | |
| |
| Or | |
| yarn | pnpm |
|
|
| bun | deno |
|
|
| npm | |
|
On Deno, prompts detect the terminal's unicode and color support from the environment, so run your script with --allow-env.
import { password } from '@inquirer/prompts';
// Or
// import password from '@inquirer/password';
const answer = await password({ message: 'Enter your name' });
| Property | Type | Required | Description |
|---|---|---|---|
| message | string | yes | The question to ask |
| mask | boolean | string | no | Show a * mask over the input, use a custom mask character, or keep it transparent. |
| toggleMask | boolean | no | Allow the user to press ctrl+t to temporarily reveal the typed value. Defaults to true; set to false to disable both the shortcut and its help line. |
| validate | string => boolean | string | Promise<boolean | string> | no | On submit, validate the filtered answered content. When returning a string, it'll be used as the error message displayed to the user. Note: returning a rejected promise, we'll assume a code error happened and crash. |
| theme | See Theming | no | Customize look of the prompt. |
You can theme a prompt by passing a theme object option. The theme object only need to includes the keys you wish to modify, we'll fallback on the defaults for the rest.
type Theme = {
prefix: string | { idle: string; done: string };
spinner: {
interval: number;
frames: string[];
};
style: {
answer: (text: string) => string;
message: (text: string, status: 'idle' | 'done' | 'loading') => string;
error: (text: string) => string;
help: (text: string) => string;
maskedText: string;
keysHelpTip: (keys: [key: string, action: string][]) => string | undefined;
};
};
maskedText is the inline tip shown when mask is off and the value is hidden (default: [input is masked]).
theme.style.keysHelpTipThis function customizes the keyboard shortcut help displayed on the line below the prompt. It receives [['ctrl+t', 'toggle visibility']] while the value is hidden. Use it to change the formatting or localize the action, or return undefined to hide the help line entirely.
theme: {
style: {
keysHelpTip: (keys) =>
keys.map(([key, action]) => `${key}: ${action}`).join(' | '),
},
}
Copyright (c) 2023 Simon Boudrias (twitter: @vaxilart)
Licensed under the MIT license.
A focused terminal password prompt that masks input. It serves a similar purpose, while @inquirer/password fits into Inquirer's prompt ecosystem and conventions.
A broader interactive-prompt library that includes password-style prompts alongside other prompt types. It offers a larger prompt toolkit, whereas @inquirer/password is focused on password entry within Inquirer.
A general-purpose interactive prompt library with a password prompt type. It provides multiple prompt types in one package; @inquirer/password is a dedicated Inquirer prompt package.
An Inquirer package for ordinary text input. It shares the Inquirer ecosystem and interactive terminal workflow, but is intended for visible text rather than masked password entry.
FAQs
Inquirer password prompt
The npm package @inquirer/password receives a total of 34,185,666 weekly downloads. As such, @inquirer/password popularity was classified as popular.
We found that @inquirer/password demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.