
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@wethegit/components-cli
Advanced tools
CLI companion for `@wethegit/components`. It allows you to initialize and add components to a project.
CLI companion for @wethegit/components
. It allows you to initialize and add components to a project.
For how to use the components in your project, see the Documentation.
To learn how to contribute, continue reading.
Make sure you using the required Node version from nvmrc.
yarn install
from the root of the monorepo, not from this package's directory.cd
into this package's directory and run yarn start
npm link
from this package's directory. Note: it MUST be npm link
and not yarn link
Now that we have a local version of the package available we need a node project to test on. If you have one already, skip to step 3.
cd
into it.yarn init -y
npm link @wethegit/components-cli
You should now be able to run npx @wethegit/components-cli init/add
from the command line.
If you'd like to add a new category of registry item, you need to:
Those are the basic steps. If this new category require a new directory as destination from the user, we also need to set that up in the config:
That's the gist of it. If there are any other places that need tweaking, Typescript will let you know.
tsup
compiles src/index.ts
, into a CommonJS format as well as their TypeScript types.
Run yarn build
to confirm compilation is working correctly. You should see a folder wethegit-components-cli/dist
which contains the compiled output.
wethegit-components
└── dist
├── index.d.ts <-- Types
└── index.js <-- CommonJS version
FAQs
CLI companion for `@wethegit/components`. It allows you to initialize and add components to a project.
The npm package @wethegit/components-cli receives a total of 68 weekly downloads. As such, @wethegit/components-cli popularity was classified as not popular.
We found that @wethegit/components-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.