
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
A tool for creating a cli which uses cli options and package.json options and merge them into default options
A tool for creating a cli which uses cli options and package.json options and merge them into default options
npm install --save brutus
var brutus = require('brutus')({
name: 'mycommand',
options: {
foo: "abc",
bar: {},
baz: [100, 200]
},
delegate: {
mergeCliOptionsToPackageOptions: function (cliOptions, pkgOptions) {
// merge options
},
mergePackageOptionsToCommandOptions: function (pkgOptions, cmdOptions) {
// merge options
},
execute: function (cliOptions, cmdOptions) {
// main process
}
}
})
// execute as a cli command (using cli options)
brutus.execAsCli()
The name of the command. This is used as the key of the user's package options.
{
"name": "users-package",
"snowball": {
"foo": "bar"
}
}
If your command name is snowball
, then the user's package options are {"foo": "bar"}
in the above example.
The default options for the command.
Brutus delegates the merging methods and command execution through delegate object.
param | type |
---|---|
cliOptions | Object |
pkgOptions | Object |
Merges the user's cli options to the user's package options.
cliOptions is the parsed argv using minimist
(i.e. require('minimist')(process.argv.slice(2))
)
param | type |
---|---|
pkgOptions | Object |
cmdOptions | Object |
Merges the user's package options to the command default options.
pkgOptions
are the part of the user's package.json of the key of your command name.
For example, your cmdName is snowball
and the user's package.json is like the below:
{
"name": "my-package",
"snowball": {
"foo": "bar"
}
}
Then the pkgOptions are {foo: "bar"}
. This is useful when you make your command's behaviour configurable by the user's package.json.
param | type |
---|---|
cliOptions | Object |
cmdOptions | Object |
Executes the command with cli and command options. The return value of execute becomes the exit code of the cli.
cmdOptions
include information merged from the user's cli options and the user's package options using the above 2 methods.
FAQs
A tool for creating a cli which uses cli options and package.json options and merge them into default options
We found that brutus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.