Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@nimbella/nimbella-cli
Advanced tools
We're building a beautiful cloud so your experience is delightful, one that allows you to focus on what you do best: explore idea, create value, and deliver applications that you are proud of. We are excited to see what you will build today, and we want to hear from you: what worked, what didn't, what we can do better — after all, we are not done and there is more to come. Reach us on Slack or on GitHub. Your Nimbella cloud account gives you all of the following features and benefits:
This repository contains the source to our nim
command line tool.
It is possible to contribute. See our contribution guide.
To build the code, run the following commands from the project directory.
npm install
npm pack
If you need to run commands using the local version of the project during development - once you have built the project source code - run the following command:
./bin/run <nim commands>
Remember to re-build the project (tsc -b
) after making changes before testing.
The build process above gives you a tarball that can be installed globally or used as a dependency on the machine on which it was built. It is not suitable for publication. To obtain a tarball that can be used more widely:
deployer
publish the result somewhere (publish to npm
, place in a web bucket, make it available as static content to a web server, etc.)nimbella-deployer
in package.json
to reference the published version.The current build will create a version of nim
suitable for use with services on nimbella.io
. It presumes the runtime repertoire that is present there, and uses the "error page" (404.html) that is used on nimbella.io
. You can change these things by placing your own files runtimes.json
or 404.html
in the deployer
directory.
For every release the github workflow updates the brew formula in nimbella/brew repo.
Node version update:
When node dependency version is updated in package.json
, run npm run pack
, make a fresh release and run
node release/homebrew/homebrew.js
It updates nimbella and nimbella-node formulas in nimbella/brew repo.
FAQs
A comprehensive CLI for the Nimbella stack
The npm package @nimbella/nimbella-cli receives a total of 342 weekly downloads. As such, @nimbella/nimbella-cli popularity was classified as not popular.
We found that @nimbella/nimbella-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.