
Security News
Next.js Patches Critical Middleware Vulnerability (CVE-2025-29927)
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
alfred-link
Advanced tools
Make your Alfred workflows installable from npm
$ npm install --save alfred-link
This package will only affect the latest one if you have multiple versions in your system.
Add the alfred-link
command as postinstall
script of your Alfred package and add alfred-unlink
as preuninstall
script to clean up the resources when the workflow gets uninstalled.
{
"name": "alfred-unicorn",
"scripts": {
"postinstall": "alfred-link",
"preuninstall": "alfred-unlink"
}
}
You can now install the alfred-unicorn
package like this
$ npm install -g alfred-unicorn
This will update info.plist
with the information from package.json
and creates a unicorn
symlink inside the Alfred workflows directory that points to the location of the alfred-unicorn
module.
This package will update the info.plist
file when the workflow is being installed. The following properties in info.plist
can be safely omitted. The corresponding values in package.json
are added to the plist file.
info.plist | package.json |
---|---|
version | version |
description | description |
webaddress | homepage |
createdby | author.name |
When developing an Alfred workflow, you can call alfred-link
directly from your cli. Use npx
to call the local installation of alfred-link
and alfred-unlink
.
$ npx alfred-link
This will create a symlink in the Alfred workflows directory pointing to your development location without transforming info.plist
.
To remove the symlink afterwards, you can call alfred-unlink
.
$ npx alfred-unlink
MIT © Sam Verschueren
FAQs
Make your Alfred workflows installable from npm
The npm package alfred-link receives a total of 90 weekly downloads. As such, alfred-link popularity was classified as not popular.
We found that alfred-link demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Next.js has patched a critical vulnerability (CVE-2025-29927) that allowed attackers to bypass middleware-based authorization checks in self-hosted apps.
Security News
A survey of 500 cybersecurity pros reveals high pay isn't enough—lack of growth and flexibility is driving attrition and risking organizational security.
Product
Socket, the leader in open source security, is now available on Google Cloud Marketplace for simplified procurement and enhanced protection against supply chain attacks.