
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
@liam-hq/cli
Advanced tools
Command-line tool designed to generate a web application that displays ER diagrams.
Command-line tool designed to generate a web application that displays ER diagrams.
$ liam erd build --input {your .sql} --format postgres
# Outputs the web application to the ./public and ./dist directories
# Or use a `db/schema.rb` file (from your Ruby on Rails app).
$ liam erd build --input {your schema.rb} --format schemarb
# Outputs the web application to the `./dist` directory
$ liam erd preview
# Launches the web application for preview
pnpm run test
To build the CLI for development purposes, run:
pnpm run build
# The executable will be output to dist-cli/bin/cli.js.
After building, you can invoke it locally with:
node ./dist-cli/bin/cli.js erd build --input ./fixtures/input.schema.rb --format schemarb
To make it globally accessible as liam
, use:
pnpm link --global
pnpm dev
This command currently performs the following actions:
erd build --input ./fixtures/input.schema.rb --format schemarb
.schema.json
to the public/
directory and launches the Vite development server.bin/cli.ts
: This is the main CLI script.src/cli/
: Contains the source code for the CLI.fixtures/input.schema.rb
: A sample input file used for testing and development purposes.src/{App,main}.tsx
, index.html
: These files constitute the web application's entry point, which displays ER diagrams.FAQs
Command-line tool designed to generate a web application that displays ER diagrams. See https://liambx.com/docs/cli
The npm package @liam-hq/cli receives a total of 1,943 weekly downloads. As such, @liam-hq/cli popularity was classified as popular.
We found that @liam-hq/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.