
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@sasjs/cli
Advanced tools
@sasjs/cli is a Command-Line Interface to assist with creating, building, and deploying Data Science projects and HTML5 Web Applications on the SAS platform (both SAS 9 and Viya). Features include:
sasjs create myApp -t jobs)sasjs cbd)sasjs fssasjs job execute / sasjs flow execute)sasjs lintsasjs docsasjs test)There is also a feature to let you deploy a frontend application as a set of streaming web services, bypassing the need to deploy to the SAS Web Server.
A quick demonstration of using it to compile, build and deploy a set of SAS Viya jobs is shown below.
npm as follows: npm i -g @sasjs/cli
You can also use the tool without deploying through NPX as follows:
npx @sasjs/cli <command>
Additional documentation can be found on the SASjs CLI documentation site.
Running npm i -g @sasjs/cli@latest does not always upgrade properly. This is due to a known bug in npm, which is fixed in npm 7.
If you are running NPM in version 6 or below, you can try running npm update -g @sasjs/cli instead, or - the sledgehammer approach - delete the files from the NPM folder and then do a fresh install.
If you find this library useful, please leave a star and help us grow our star graph!
Thanks goes to these wonderful people (emoji key):
Muhammad Saad 💻 ⚠️ 👀 🧑🏫 📖 | Yury Shkoda 💻 📆 ⚠️ 📹 📖 | Krishna Acondy 💻 ⚠️ 🚇 🖋 🚧 📦 👀 | Mihajlo Medjedovic 💻 🚇 ⚠️ 👀 | Allan Bowe 💻 👀 ⚠️ 📹 📖 | Sabir Hassan 💻 👀 ⚠️ 🤔 | VladislavParhomchik ⚠️ 👀 |
Rud Faden 🐛 |
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
Command line interface for SASjs
The npm package @sasjs/cli receives a total of 1,540 weekly downloads. As such, @sasjs/cli popularity was classified as popular.
We found that @sasjs/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.