
Security News
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.
@medplum/cli
Advanced tools
The Medplum CLI (Command Line Interface) is a set of command line tools to quickly deploy Medplum web applications and Medplum bots.
Add as a dependency:
npm install @medplum/cli
Syntax:
medplum <command> <args>
At present, there is only one command called deploy-bot. Syntax:
medplum deploy-bot <filename> <bot-id>
Example:
medplum deploy-bot dist/hello-world.js e54fa800-02ab-41be-8d48-8c027dd85ccc
In practice, consider adding the command to the "scripts" section of your package.json:
"scripts": {
"build": "tsc",
"deploy:hello-world": "medplum deploy-bot dist/hello-world.js e54fa800-02ab-41be-8d48-8c0200000000"
},
Then, from the command line, run:
npm run deploy:hello-world
Authentication requires client credentials in the form of environment variables MEDPLUM_CLIENT_ID and MEDPLUM_CLIENT_SECRET. This supports most use cases, including secrets from CI/CD. dotenv is enabled, so you could store them in .env file.
Write your bot. This can be TypeScript. It can reference @medplum/core and node-fetch:
import { MedplumClient } from '@medplum/core';
import { Resource } from '@medplum/fhirtypes';
export async function handler(medplum: MedplumClient, input: Resource): Promise<any> {
console.log('Hello world');
}
Compile with vanilla tsc (no build tools required)
npx tsc
Or:
npm run build
You get sensible plain old JavaScript output:
export async function handler(medplum, input) {
console.log('Hello world');
}
You can then use the Medplum CLI to deploy it.
npm run deploy:hello-world
Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications. Medplum includes a FHIR server, React component library, and developer app.
Apache 2.0. Copyright © Medplum 2022
FAQs
Medplum Command Line Interface
The npm package @medplum/cli receives a total of 3,113 weekly downloads. As such, @medplum/cli popularity was classified as popular.
We found that @medplum/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.

Security News
/Research
Socket found a Rust typosquat (finch-rust) that loads sha-rust to steal credentials, using impersonation and an unpinned dependency to auto-deliver updates.

Research
/Security Fundamentals
A pair of typosquatted Go packages posing as Google’s UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting developer and CI data at risk.