
Security News
Feross on Risky Business Weekly Podcast: npm’s Ongoing Supply Chain Attacks
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
@wethegit/components-cli
Advanced tools
CLI companion for `@wethegit/components`. It allows you to initialize and add components to a project.
CLI companion for @wethegit/components
. It allows you to initialize and add components to a project.
For how to use the components in your project, see the Documentation.
To learn how to contribute, continue reading.
Make sure you using the required Node version from nvmrc.
yarn install
from the root of the monorepo, not from this package's directory.cd
into this package's directory and run yarn start
npm link
from this package's directory. Note: it MUST be npm link
and not yarn link
Now that we have a local version of the package available we need a node project to test on. If you have one already, skip to step 3.
cd
into it.yarn init -y
npm link @wethegit/components-cli
You should now be able to run npx @wethegit/components-cli init/add
from the command line.
If you'd like to add a new category of registry item, you need to:
Those are the basic steps. If this new category require a new directory as destination from the user, we also need to set that up in the config:
That's the gist of it. If there are any other places that need tweaking, Typescript will let you know.
tsup
compiles src/index.ts
, into a CommonJS format as well as their TypeScript types.
Run yarn build
to confirm compilation is working correctly. You should see a folder wethegit-components-cli/dist
which contains the compiled output.
wethegit-components
└── dist
├── index.d.ts <-- Types
└── index.js <-- CommonJS version
FAQs
CLI companion for `@wethegit/components`. It allows you to initialize and add components to a project.
The npm package @wethegit/components-cli receives a total of 142 weekly downloads. As such, @wethegit/components-cli popularity was classified as not popular.
We found that @wethegit/components-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh joins Risky Business Weekly to unpack recent npm phishing attacks, their limited impact, and the risks if attackers get smarter.
Product
Socket’s new Tier 1 Reachability filters out up to 80% of irrelevant CVEs, so security teams can focus on the vulnerabilities that matter.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.