
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@roxyon/deploy-core
Advanced tools
Shared deploy pipeline for Roxyon tooling — project detection, archiving, and the build/upload/poll orchestration used by @roxyon/cli and @roxyon/mcp.
The shared deploy pipeline behind @roxyon/cli
and @roxyon/mcp: project-type
detection, deterministic archiving, and the build → upload → poll orchestration.
You normally use the CLI or the MCP server, not this directly.
npm i @roxyon/deploy-core
import { Roxyon } from '@roxyon/api-client';
import { deployProject } from '@roxyon/deploy-core';
const outcome = await deployProject({
cwd: process.cwd(),
roxyon: new Roxyon({ sessionToken: process.env.ROXYON_TOKEN }),
reporter: { step: console.log, log: console.log },
});
deployProject() — reads roxyon.json, builds if configured, packs (minus
.roxyonignore / .gitignore), uploads, and for app runtimes polls until the
deploy is live or failed. The console creates the application on the first
deploy.detectRuntime() / buildProjectConfig() — for roxyon initpackDirectory() / buildIgnore() / listFiles() — the archiverloadProjectConfig() / saveProjectConfig() — roxyon.jsonloadCredentials() / saveCredentials() — ~/.roxyon/config.jsonMIT · part of roxyon-devtools
FAQs
Shared deploy pipeline for Roxyon tooling — project detection, archiving, and the build/upload/poll orchestration used by @roxyon/cli and @roxyon/mcp.
The npm package @roxyon/deploy-core receives a total of 8 weekly downloads. As such, @roxyon/deploy-core popularity was classified as not popular.
We found that @roxyon/deploy-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.