
Security News
Socket Releases Free Certified Patches for Critical vm2 Sandbox Escape
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.
A child process async.
#f1e05a

> bert [...tasks].agent.sh().# Install bert.js
npm install --global bert.js
# Install in you proyect
npm install --save-dev bert.js
# Run It
bert
.bert.js fileconst bert = require('bert.js')
const node = bert.agent('node', {image: 'node:7.7.0'})
bert.task('taskInfo', () => {
node.sh('node --version')
bert.sh('node --version')
})
$ bert -V taskInfo
[bert] Prepare agent node (node:7.7.0)
[bert:run] > docker pull node:7.7.0
[bert:run] > docker run -t -d -u 112:116 -w ******** -v ******** -v ******** -e ******** --entrypoint cat node:7.7.0
[bert:run] node> node --version
v7.7.0
[bert:run] > node --version
v7.6.0
$ bert -V --empty taskInfo
[WARNING] This is not possible load local agent without docker.
[bert] Prepare agent node (node:7.7.0)
[bert:run] > docker pull node:7.7.0
[bert:run] > docker run -t -d -u 112:116 -w ******** -v ******** -v ******** -e ******** --entrypoint cat node:7.7.0
[bert:run] node> node --version
v7.7.0
$ bert taskInfo
node> node --version
v7.7.0
> node --version
v7.6.0
$ bert -V --clear
[bert] Prepare to remove node (node:7.7.0)
[bert:run] > docker stop --time=1 ********
[bert:run] > docker rm -f ********
Features (Commands):
Show a list to help.
$ bert [help|h|--help|-h]
Initialize a Bert file (.bert.js).
$ bert init
const bert = require('bert.js')
/* EXAMPLES WITH DOCKER */
/* ==================== */
bert.stage('node')
// CMD Equivalent: docker create node:latest
bert.stage('node', {
image: 'node:7.7.0'
})
// CMD Equivalent: docker create node:7.7.0
bert.stage('node', {
tag: '7.7.0'
})
// CMD Equivalent: docker create node:7.7.0
bert.stage('pepe', {
image: 'node:7.7.0'
})
// CMD Equivalent: docker create node:7.7.0
bin/: The script to use bert on console.lib/:
dotBert/: Working with the .bert.js file.engine/: Working with the diferent engines.
docker/: working with the docker engine.FAQs
A child process async.
The npm package bert.js receives a total of 41 weekly downloads. As such, bert.js popularity was classified as not popular.
We found that bert.js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A critical vm2 sandbox escape can allow untrusted JavaScript to break isolation and execute commands on the host Node.js process.

Research
Five malicious NuGet packages impersonate Chinese .NET libraries to deploy a stealer targeting browser credentials, crypto wallets, SSH keys, and local files.

Security News
pnpm 11 turns on a 1-day Minimum Release Age and blocks exotic subdeps by default, adding safeguards against fast-moving supply chain attacks.