
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
@maktouch/devctl
Advanced tools
DevCTL is a CLI app designed to:
DevCTL decreases the onboarding time of new devs in any of our projects. All the new users needs to have installed is docker (with docker compose V2) and NodeJS 16+. Once a project is setup with devctl, its users does not require knowledge of docker.
# Install globally
pnpm add -g @maktouch/devctl
# or
npm install -g @maktouch/devctl
# Initialize a new project
devctl init
# Switch services and start
devctl switch
# View available commands
devctl --help
devctl init - Initialize a new devctl project with database presetsdevctl switch - Interactively select services and environment, then start alongside other running projectsdevctl up - Start selected services alongside other running projectsdevctl up --no-merge - Stop other tracked projects before starting selected servicesdevctl down - Stop and remove containers for the current projectdevctl down --all - Stop and remove containers for all tracked projectsdevctl status - View current configurationdevctl logs - View container logsdevctl exec - Execute commands in running containersdevctl run - Run one-off commandsdevctl secrets - Pull secrets from configured providersdevctl compile - Generate docker-compose.yaml (advanced)Define a custom command in .devctl.yaml and implement the handler in TypeScript.
TypeScript handlers are compiled on the fly using esbuild — no extra dependencies needed in your project.
# .devctl.yaml
commands:
- name: setup-ssl
description: Generate local SSL certificates using mkcert
handler: .devctl/commands/setup-ssl
// .devctl/commands/setup-ssl/index.ts
import type { CustomCommandPayload } from "@maktouch/devctl";
export default async function setupSsl(payload: CustomCommandPayload) {
const { projectRoot, config, args } = payload;
console.log("Project root:", projectRoot);
console.log("Has config:", Boolean(config));
console.log("Args:", args);
}
This project is built with:
See MIGRATION.md for details on the modern architecture.
.devctl.yaml and .devconfig.yaml documentationFAQs
Easily start developing in monorepos with docker-compose
The npm package @maktouch/devctl receives a total of 401 weekly downloads. As such, @maktouch/devctl popularity was classified as not popular.
We found that @maktouch/devctl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.