Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
1 It's script-friendly too.
Above: Use
npx asari
in your shell to manage your work in GitHub.
"Asari" (あさり) is Japanese for "clam". Like a clam, asari
is happiest when it's inside a shell.
🐚 asari
lets you work with GitHub from your command line, and is delicious when lightly fried with garlic and spices.
Above: Running npx asari
from your command line shows you the top level of options and commands.
Above: Running npx asari <command>
shows you options for working with GitHub issues, projects and pull requests.
npm install --global asari
When you run the tool, it will automatically notify you if there is a newer version of it available for you to update to.
You can disable notifications if you'd prefer not to be notified about updates.
npx asari
The npx
command lets you use this tool without installing it. However, each time you use npx
it downloads the whole package from the npm registry, which takes a while. That's why global installation is reccommended.
Note: If this tool is globally installed,
npx asari
will use that globally installed version rather than downloading.
npx asari
# Display help.
npx asari <command>
# Display help for the command.
npx asari --version
# Show the version number.
npx asari allowance
# Display current GitHub API rate-limiting allowance.
npx asari completion
# Output a generated script. To enable bash/zsh completions:
# 1. Install asari globally.
# 2. Add the script to your .bashrc or .bash_profile (or .zshrc for zsh).
npx asari issues create <github-url> [--title] [--body] [--assignees]
# Create a new issue
npx asari issues open <github-url>
# Set the state of an existing issue to `open`
npx asari issues close <github-url>
# Set the state of an existing issue to `closed`
npx asari issues list [--type]
# List all issues assigned to the authenticated user.
npx asari issues list-for-repo <github-url>
# List all issues in a repository.
npx asari projects add [--column-url] [--url]
# Add a pull request to a GitHub project column.
npx asari projects close <github-url>
# Set the state of an existing project board to `closed`.
npx asari projects create <github-url> [--body]
# Create a new project.
npx asari pulls close <github-url>
# Set the state of an existing pull request to `closed`.
npx asari pulls create-comment <github-url> [--body]
# Create a comment on an existing pull request.
npx asari pulls create-review-request <github-url> [reviewers|team-reviewers]
# Request a review for a pull request.
npx asari pulls create <github-url> [--base] [--body] [--title]
# Create a new pull request.
npx asari pulls delete-comment <github-url>
# Delete a comment on an existing pull request.
npx asari pulls delete-review-request <github-url> [reviewers|team-reviewers]
# Delete a review for a pull request.
npx asari pulls merge <github-url> [--method]
# Merge an existing pull request.
npx asari pulls open <github-url>
# Set the state of an existing pull request to `open`.
npx asari repos list-topics <github-url>
# List all topics.
npx asari repos <add-topics|remove-topics> <github-url> --topic new-app
# Add/Remove a topic
npx asari repos <add-topics|remove-topics> <github-url> --topic new-app --topic good-one
npx asari repos <add-topics|remove-topics> <github-url> --topics new-app,good-one
npx asari repos <add-topics|remove-topics> <github-url> --topics "new-app, good-one"
# Add/Remove multiple topics
--json
# Format command output as JSON string.
--token
# GitHub personal access token.
# Generate one at https://github.com/settings/tokens
Note: You can omit the
--token
argument, because it will default to$GITHUB_PERSONAL_ACCESS_TOKEN
.In that case you will need to export the token to your environment:
export $GITHUB_PERSONAL_ACCESS_TOKEN=[your token here]
This project loosely follows the example provided in the Yargs documentation for command hierarchy and directory structure.
bin/asari.js
for the root asari
command.src/commands
for the asari <command>
commands.hyphen-case
.camelCase
.under_score
format.The .eslintrc.js file contains the settings for code linting.
Consider installing eslint
in your editor. Plugins are available for most popular editors.
Note: .eslintrc.js
extends the prettier
tool, which applies code formatting rules.
You can npm run eslint-check
to check there are no conflicts between eslint and prettier configurations.
The prettier
tool uses the "@adambraimbridge/prettierrc-2019-05" configuration.
Consider installing prettier
in your editor. Plugins are available for most popular editors.
npm run unit-test
# jest --coverage
npm run test
# npm run lint && npm run unit-test
npm run lint
# eslint src/ bin/ test/
npm run lint-fix
# eslint --fix eslint --fix src/ bin/ test/
npm run eslint-check
# eslint --print-config . | eslint-config-prettier-check
FAQs
🐚 Asari: A human-friendly command line tool for the GitHub API
The npm package asari receives a total of 1 weekly downloads. As such, asari popularity was classified as not popular.
We found that asari demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.