
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@kjanat/github-labelmanager
Advanced tools
Declaratively sync GitHub issue labels from a YAML config file.
deno install -Agn github-labelmanager jsr:@kjanat/github-labelmanager/cli
npm install -g @kjanat/github-labelmanager
docker pull ghcr.io/kjanat/github-labelmanager:latest
GITHUB_TOKEN=ghp_xxx github-labelmanager owner/repo
Preview changes without applying:
github-labelmanager owner/repo --dry-run
npx (without installing)
GITHUB_TOKEN=ghp_xxx npx @kjanat/github-labelmanager owner/repo
Deno (without installing)
GITHUB_TOKEN=ghp_xxx deno run -A jsr:@kjanat/github-labelmanager/cli owner/repo
Docker
docker run --rm -e GITHUB_TOKEN=ghp_xxx -v $(pwd)/.github:/app/.github ghcr.io/kjanat/github-labelmanager owner/repo
name: Sync Labels
on:
push:
paths:
- ".github/labels.yml"
workflow_dispatch:
jobs:
sync:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: kjanat/github-labelmanager@v1
with:
token: ${{ secrets.GITHUB_TOKEN }}
| Input | Required | Default | Description |
|---|---|---|---|
token | Yes | - | GitHub token with repo access |
repository | No | github.repository | Target repo in owner/repo |
dry-run | No | false | Preview without making changes |
config-path | No | .github/labels.yml | Path to label config file |
Create .github/labels.yml in your repository:
labels:
- name: bug
color: "#d73a4a"
description: Something isn't working
- name: feature
color: "#a2eeef"
description: New feature or request
aliases: [enhancement] # Renames 'enhancement' to 'feature'
- name: docs
color: "#0075ca"
description: Documentation improvements
aliases: [documentation]
delete:
- obsolete-label
- another-old-label
| Field | Required | Description |
|---|---|---|
name | Yes | Label name |
color | Yes | Hex color (with or without #) |
description | Yes | Short description |
aliases | No | Old names to rename from |
Add label names to the delete array to remove them.
| Variable | Required | Description |
|---|---|---|
GITHUB_TOKEN | Yes | Personal access token or secrets.GITHUB_TOKEN |
REPO | No | Fallback if not passed as argument |
DRY_RUN | No | Set to true for dry-run mode |
# Run locally
deno task labels owner/repo
# Dry run
deno task labels:dry-run owner/repo
# Type check
deno check --all
# Format
deno fmt
# Lint
deno lint
# Build npm package
deno task build
MIT
FAQs
Easily manage GitHub labels
The npm package @kjanat/github-labelmanager receives a total of 2 weekly downloads. As such, @kjanat/github-labelmanager popularity was classified as not popular.
We found that @kjanat/github-labelmanager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.