
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@m860/cerberus-cli
Advanced tools
cerberus命令行工具
$ # 安装cli工具
$ npm i -D @m860/cerberus-cli
$ # 添加配置文件
$ touch cbs.json # 根据需求进行配置
$ # 开起调试模式
$ npx cbs start cbs.json
start <config> 启动本地小程序server
--host string server地址--port number server端口login - 登录whoami - 显示当前登录人logout - 退出登录publish <config> <key> <versionName> - 发布widget add <key> - 添加widgetwidget [list/ls] - 查询widgetswidget rm <key> - 删除widgetbundles <key> - 查询bundlesregister - 注册config [list/ls] - 显示用户自定义配置config set <key> <value> - 设置用户自定义配置
比如要修改CloudCerberus的服务地址,
cbs config set baseURL "http://127.0.0.1"
config reset - 重置用户自定义配置目前只支持.json文件配置
type ConfigOption={
// 同webpack.mode
mode:string,
// 同webpack.entry
entry:any,
// 同webpack.output
output:any,
/**
* 需要替换的module
*
* @example
* {
* cerberusTransformOption:{
* modules:["dateformat"]
* }
* }
*
*/
cerberusTransformOption:{
modules:Array<string>,
/**
* 需要处理的资源文件的正则表达式,默认:/\.(gif|png|jpeg|jpg|svg)$/i
*/
resourceTest?:?RegExp
}
}
FAQs
cerberus cli
We found that @m860/cerberus-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.