
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@underctrl/commandkit
Advanced tools
CommandKit is a library that makes it easy to handle commands (+ validations), and events in your Discord.js projects.
CommandKit is a library that makes it easy to handle commands (+ validations), and events in your Discord.js projects.
Supports Discord.js version 14
You can find the full documentation here
To install CommandKit, simply run the following command:
For npm:
npm install commandkit
For yarn:
yarn add commandkit
This is a simple overview of how to set up this library with all the options. You can read more in the full documentation
// index.js
const { Client, GatewayIntentBits } = require('discord.js');
const { CommandKit } = require('commandkit');
const path = require('path');
const client = new Client({
intents: [
GatewayIntentBits.Guilds,
GatewayIntentBits.GuildMessages,
GatewayIntentBits.MessageContent,
],
});
new CommandKit({
// Your discord.js client object
client,
// Path to the commands folder
commandsPath: path.join(__dirname, 'commands'),
// Path to the events folder
eventsPath: path.join(__dirname, 'events'),
// Path to the validations folder (only valid if "commandsPath" was provided)
validationsPath: path.join(__dirname, 'validations'),
// Array of development server IDs (used to register and run devOnly commands)
devGuildIds: ['DEV_SERVER_ID_1', 'DEV_SERVER_ID_2'],
// Array of developer user IDs (used for devOnly commands)
devUserIds: ['DEV_USER_ID_1', 'DEV_USER_ID_2'],
// Array of developer role IDs (used for devOnly commands)
devRoleIds: ['DEV_ROLE_ID_1', 'DEV_ROLE_ID_2'],
// A property that disables CommandKit's built-in validations
skipBuiltInValidations: true,
});
client.login('YOUR_TOKEN_HERE');
FAQs
Unknown package
The npm package @underctrl/commandkit receives a total of 0 weekly downloads. As such, @underctrl/commandkit popularity was classified as not popular.
We found that @underctrl/commandkit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.