
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@supernovaio/cli-v2
Advanced tools
The Supernova CLI enables you to run specific tasks connected with Supernova from your CI/CD pipelines, from your action triggers (GitHub Actions and similar) or from your command line as well.
CLI is separated into different commands that you can use to automate certain aspects of working with Supernova. More command line options are coming as well, stay tuned for those!
You can also install the CLI as global package, and make the CLI globally available under > supernova
command to your command line. To install the CLI globally, just run the following command:
npm install -g @supernovaio/cli
yarn global add @supernovaio/cli
You can now test that everything was properly set up by running the supernova
command:
~ % supernova --version
> @supernovaio/cli/1.x.x ...
Node 21
or newer environment is required to run the Supernova CLI.
You can update globally installed CLI by running npm update command on the package:
npm update -g @supernovaio/cli
yarn global upgrade @supernovaio/cli
This will upgrade the CLI to the latest version and make it immediately last default used version.
The login command is a crucial part of the Supernova CLI, as it establishes authentication required before using any other commands. This section explains how the login process works and how to use it effectively.
The login command authenticates you with Supernova services using a secure OAuth flow with PKCE (Proof Key for Code Exchange). This authentication method is secure and follows modern best practices for CLI authorization.
supernova login
The login process follows these steps:
Flag | Description |
---|---|
--environment | Specify the environment (production by default) |
Your authentication tokens are securely stored using one of the following methods:
~/.supernova/tokens.json
SUPERNOVA_TOKEN
The CLI automatically handles token refreshing:
Standard login to production environment:
supernova login
Login to a specific environment:
supernova login --environment=staging
If your browser doesn't open automatically, the CLI will display a URL that you can manually copy and paste into your browser to complete the authentication process. If you encounter authentication issues, you can try:
logout
command (which removes stored tokens)The Supernova CLI supports configuration files to streamline your workflow by persisting command options and preferences.
When working with Supernova CLI, you can use a configuration file named located in your current working directory. This file stores your command-specific options, eliminating the need to repeatedly provide the same flags and parameters in subsequent commands. .supernova.json
The configuration file uses a simple JSON structure:
{
"commands": {
"command-name": {
"option1": "value1",
"option2": "value2"
}
},
"global": {}
}
The file consists of two main sections:
The configuration system operates through the following mechanisms:
.supernova.json
Here's an example of a configuration file for token synchronization:
{
"commands": {
"login": {
"environment": "production"
},
"figma-tokens-sync": {
"mode": "single-file",
"dryRun": false
}
},
"global": {}
}
Using the configuration file offers several advantages:
Each command can store its specific configuration options. For example:
"login": {
"environment": "production"
}
"import-storybook": {
"environment": "production",
"dir": "./storybook-static",
"designSystemId": "37355",
"versionId": "37352"
}
The CLI handles configuration automatically:
.supernova.json
If you encounter issues with your configuration:
.supernova.json
By leveraging the configuration file, you can significantly streamline your workflow when working with the Supernova CLI.
After successfully logging in, you can use other Supernova CLI commands. See the additional use cases section for more information about available commands.
Following is the list of use cases for Supernova CLI. We will be adding more over time, stay tuned!
If you have additional ideas about how to make this project better, let us know by opening an issue! You can also open pull requests if you've worked on improving something yourself and would like to contribute back to the community.
We will be reviewing feature-pull-requests on case-by-case basis, but in general, we are super open to your new ideas and we welcome them! And finally, thank you for your support! You are an amazing community.
Supernova Engineering Team
FAQs
Supernova.io Command Line Interface
We found that @supernovaio/cli-v2 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.