Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@listenai/lisa
Advanced tools
Lisa 是 Lisa Framework 核心命令行工具,提供模版生成能力以及任务执行命令
$ npm install -g @listenai/lisa
$ lisa COMMAND
running command...
$ lisa (-v|--version|version)
@listenai/lisa/1.3.2 darwin-x64 node-v12.3.1
$ lisa --help [COMMAND]
USAGE
$ lisa COMMAND
...
lisa build
lisa create NAME
lisa flash [FILEPATH]
lisa help [COMMAND]
lisa init
lisa install [PKG]
lisa list
lisa pipeline [ID]
lisa publish
lisa search KEYWORD
lisa task [ID]
lisa uninstall [PKG]
lisa update
lisa upgrade
lisa view PKG [FIELD]
lisa build
固件开发项目编译打包
USAGE
$ lisa build
OPTIONS
-r, --release 打包release包
lisa create NAME
创建项目,例lisa create newProject -t @generator/csk
USAGE
$ lisa create NAME
ARGUMENTS
NAME 项目名称
OPTIONS
-t, --template=template (required) 生成器模板
lisa flash [FILEPATH]
烧录程序
USAGE
$ lisa flash [FILEPATH]
ARGUMENTS
FILEPATH 烧录的lpk包绝对路径,非必填,默认烧录csk开发项目package后的lpk包
OPTIONS
-p, --part=part 选择烧录part文件,例:'-p master -p script',默认全部烧录
lisa help [COMMAND]
display help for lisa
USAGE
$ lisa help [COMMAND]
ARGUMENTS
COMMAND command to show help for
OPTIONS
--all see all commands in CLI
See code: @oclif/plugin-help
lisa init
项目初始化
USAGE
$ lisa init
lisa install [PKG]
安装依赖
USAGE
$ lisa install [PKG]
ARGUMENTS
PKG 资源包名,例:'@source/csk4002',不填时默认安装lisa项目中的依赖
OPTIONS
-g, --global 全局安装依赖
lisa list
列出项目已安装的Modules
USAGE
$ lisa list
lisa pipeline [ID]
执行pipeline,可执行的pipeline输入lisa pipeline -T
命令查看
USAGE
$ lisa pipeline [ID]
ARGUMENTS
ID pipleLine id
OPTIONS
-T, --table 表格展示所有可执行的pipeline
--json json展示所有可执行的pipeline
lisa publish
发布到lpm库
USAGE
$ lisa publish
lisa search KEYWORD
根据关键字查找pkg
USAGE
$ lisa search KEYWORD
ARGUMENTS
KEYWORD 关键字,例:'tool'
lisa task [ID]
执行tasks,可执行的task输入lisa task -T
命令查看
USAGE
$ lisa task [ID]
ARGUMENTS
ID task id
OPTIONS
-T, --table 表格展示所有可执行的task
--json json展示所有可执行的task
lisa uninstall [PKG]
移除依赖
USAGE
$ lisa uninstall [PKG]
ARGUMENTS
PKG 资源包名,例:'@tool/nds-toolchain @tool/cskburn'
OPTIONS
-g, --global 全局移除依赖
lisa update
更新lisa到最新版本
USAGE
$ lisa update
lisa upgrade
更新当前项目依赖
USAGE
$ lisa upgrade
OPTIONS
--latest 依赖更新到最新版本
lisa view PKG [FIELD]
查看pkg相关信息
USAGE
$ lisa view PKG [FIELD]
ARGUMENTS
PKG 包名,如`@listenai/lisa`
FIELD [default: versions] 查看包的相关信息,如`versions`,`dependencies`
FAQs
Lisa 是 Lisa Framework 核心命令行工具,提供模版生成能力以及任务执行命令
The npm package @listenai/lisa receives a total of 133 weekly downloads. As such, @listenai/lisa popularity was classified as not popular.
We found that @listenai/lisa demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.