
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@netlify/run-utils
Advanced tools
Utility for running commands inside Netlify Build. Currently, there is just one utility, run, which is a thin wrapper
over execa defaulting to { preferLocal: true, stdio: 'inherit' }.
// Runs `eslint src/ test/` and prints the result
// Either local or global binaries can be run
const exampleNetlifyPlugin = {
async onBuild({ utils: { run } }) {
await run('eslint', ['src/', 'test/'])
},
}
// Same but with a more convenient syntax
const exampleNetlifyPlugin = {
async onBuild({ utils: { run } }) {
await run.command('eslint src/ test/')
},
}
// Retrieve command's output and exit code as variables
const exampleNetlifyPlugin = {
async onBuild({ utils: { run } }) {
const { stdout, stderr, exitCode } = await run('eslint', ['src/', 'test/'])
console.log({ stdout, stderr, exitCode })
},
}
// Streaming mode
const exampleNetlifyPlugin = {
onBuild({ utils: { run } }) {
const { stdout } = run('eslint', ['src/', 'test/'])
stdout.pipe(fs.createWriteStream('stdout.txt'))
},
}
// If the command exit code is not 0 or was terminated by a signal, an error
// is thrown with failure information
const exampleNetlifyPlugin = {
async onBuild({ utils: { run } }) {
try {
await run('eslint', ['does_not_exist'])
} catch (error) {
console.error(error)
}
},
}
// Pass environment variables
const exampleNetlifyPlugin = {
async onBuild({ utils: { run } }) {
await run('eslint', ['src/', 'test/'], { env: { TEST: 'true' } })
},
}
Execute a command/file.
Same as run() except both file and arguments are specified in a single command string.
For example, run('echo', ['netlify']) is the same as run.command('echo netlify').
If the file or an argument contains spaces, they must be escaped with backslashes. This matters especially if command
is not a constant but a variable, for example with __dirname or process.cwd(). Except for spaces, no
escaping/quoting is needed.
FAQs
Utility for running commands inside Netlify Build
The npm package @netlify/run-utils receives a total of 152,236 weekly downloads. As such, @netlify/run-utils popularity was classified as popular.
We found that @netlify/run-utils demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.