
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@thumbsmith/cli
Advanced tools
Command line interface for creating and managing Thumbsmith thumbnails.
Features a light weight, live reloading, vite-based development environment for best developer experience.
npm i @thumbsmith/cli -g
thumbsmith -h
Commands:
init [name] Create a new thumbnail template
dev <file> Start the development server on a thumbnail
deploy <file> Deploy a thumbnail template to your account
download <name> Download a thumbnail template file from your account
Create a new thumbnail template.
thumbsmith init [name] --starter <starter>
A new template file will be created in the directory where you ran the command.
You can then open and edit this file with your code editor of choice.
Example:
thumbsmith init
# or
thumbsmith init blog
You can also specify a starter template to start from via the --starter option.
Example:
thumbsmith init product --starter=e-commerce
Start the development server on a thumbnail.
thumbsmith dev <file>
A development server will be open on http://localhost:3000/
Example:
thumbsmith dev blog.thumbnail.html
# or
thumbsmith dev blog.thumbnail.html --open --port=4000
You can create a public folder that lives next to the thumbnail file to serve images for your thumbnail during development. In production, you can host them on your website or in any way you see fit.
Deploy a thumbnail template to your account. Requires authorization.
thumbsmith deploy <file>
The specified file will be synced to your account and made available on the Thumbsmith CDN.
This can be useful to setup automatic deployment of the thumbnail in your CI/CD workflows.
Example:
thumbsmith deploy blog.thumbnail.html
# or
thumbsmith deploy blog.thumbnail.html --api-token=MY_THUMBSMITH_TOKEN
Download a thumbnail template file from your account. Requires authorization.
thumbsmith download <name>
A template file with the contents of the specified template will be added in the directory where you ran the command.
Example:
thumbsmith download blog
# or
thumbsmith download blog --api-token=MY_THUMBSMITH_TOKEN
Some commands require authorization (via API token) to an account to operate.
Each account gets an API token on signup. Once you're logged in your account, go in the settings page and scroll to the "API Token" section.
Once there, you can see and copy the token by clicking on the eye icon on the input.
There are 2 ways to provide the token to the CLI:
Via the --api-token parameter:
thumbsmith some-action --api-token=MY_THUMBSMITH_TOKEN
Via the THUMBSMITH_API_TOKEN environment variable (recommended):
We recommend this method as passing the token via the command line parameter might log it in your CI/CD's workflow or in other process monitoring tools, which might not be safe.
Depending on your environment, use the appropriate method to set the THUMBSMITH_API_TOKEN environment variable, then run the thumbsmith command.
FAQs
Vite-based development environment for creating thumbsmith thumbnails.
The npm package @thumbsmith/cli receives a total of 7 weekly downloads. As such, @thumbsmith/cli popularity was classified as not popular.
We found that @thumbsmith/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.