
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
Only ask a question one time and store the answer.
Install with npm
$ npm i ask-once && question-cache --save
1. Pass an instance of question-cache
var questions = require('question-cache')();
var ask = require('ask-once')({questions: questions});
2. Ask a question!
ask('May I have your username?', function (err, answer) {
console.log(answer);
});
The user's answer is saved, and the question won't be asked again unless:
force: true is passed on the options, orWhere are the answers stored?
The user's answers are saved on a global config store that is uniquely identified to the application using ask-once.
Can I change where answers are stored?
Yes, you can pass your own instance of data-store with the cwd option set to whatever you want it to be. Here's an example:
var questions = require('question-cache')();
// pass your own instance of data-store, so you can use
// whatever storage location you want
var store = require('data-store')('foo', {cwd: 'bar'});
var ask = require('ask-once')({
questions: questions,
store: store
});
ask('May I have your username?' function (err, answer) {
console.log(answer);
});
To re-ask questions or reset the stored values:
options.force: will re-ask the given question or questions, regardless of whether or not previously stored values exists.options.init: will delete the entire store and start over again.Returns a question-asking function that only asks a question if the answer is not already stored.
Params
questions {Object}: Pass your instance of [question-cache][] on the questions parameter.store {Object}: Pass your instance of data-store on the store parameter.returns {Function}: Function to use when asking questions.Example
var ask = require('ask-once')(questions, store);
Ask a question only if the answer is not stored.
Params
question {String}: Key of the question in the questions cache to ask.options {Object}: Options to control re-initializing the answer or forcing the question.cb {Function}: Callback function with the err and answer parameters.Example
ask('username', function (err, answer) {
if (err) return console.error(err);
console.log(answer);
//=> doowb
});
First time the program is run, the user is prompted to answer a question:
Additional runs of the program will skip prompting the user:
Passing the init option will delete all the stored answers and prompt the user to answer the question again:
Additional runs after clearing the stop will return the newly saved answer:
Passing the force option will force the question to be asked:
Additional runs after forcing the question, will return the newly saved answer:

Install dev dependencies:
$ npm i -d && npm test
Pull requests and stars are always welcome. For bugs and feature requests, please create an issue.
Brian Woodward
Copyright © 2015 Brian Woodward Released under the MIT license.
This file was generated by verb-cli on September 22, 2015.
FAQs
Only ask a question one time and store the answer.
The npm package ask-once receives a total of 28 weekly downloads. As such, ask-once popularity was classified as not popular.
We found that ask-once demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.