
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
A CLI to upload and download files from the Capacitor go Cloud.
npm i -g capgo
Before use the CLI you should register here : https://capgo.app/
Then go in you account in apikey section and click in the read/write key to copy it.
capgo add [appId] --apikey=********
[appId] your app ID the format com.test.app is explained here
Optionally you can give:
--icon /path/to/my/icon to have a custom icon in the list--name test to have a custom name in the listcapgo upload [appId] --apikey=********
[appId] is your app ID the format is explained here
Optionally you can give:
--path /path/to/my/dist/folder to send your code to the cloud--name test to have a custom name in the list--channel prod to link this version to channelcapgo set [appId] [version] [channel] --apikey=********
[appId] your app ID the format is explained here
[version] your app version already sended to the cloud
[channel] the channel you want to link the version
capgo delete [appId] --apikey=********
[appId] your app ID present in the Cloud
Install development dependencies
rm -rf node_modules
npm i
Set "sourceMap": true, in tsconfig.json
Run webpack development server
npm run dev
Attach debugger to the process started with npm run dev
VScode:
Run Debug on fixtures launch configuration
Edit configuration to debug on different files
Other IDEs:
Debug on fixtures configuration as the exampleSet "sourceMap": false, in tsconfig.json
TODO: add separate build config
Run
npm install && set NODE_ENV=production&& npx webpack --config webpack.config.js && rm -rf node_modules && npm i --only=prod && npm prune --production && npm shrinkwrap
To release a new package version:
Bump version in package.json manually
Run commands from Production build section
Run npm publish --dry-run:
ensure that only necessary files are listed in package preview
ensure that npm-shrinkwrap.json does not include development dependencies
Run npm publish or npm publish --tag beta
prerequisite: perform production build
Pkg will not resolve dynamic module imports, so avoid these at all costs. (Basically, just use plain ordinary static
import Something from 'somewhere'and no issue should arise)
Build for all supported platforms
pkg ./dist/index.js
You can specify targets with
-toption (refer topkg --helpand examples on pkg's npm) e.g. usepkg -t node14-win-x64 ./dist/index.jsto build for Node14, Windows x64
Build for Node14 Windows x64
pkg -t node14-win-x64 ./dist/index.js
FAQs
A CLI to upload to capgo servers
The npm package capgo receives a total of 106 weekly downloads. As such, capgo popularity was classified as not popular.
We found that capgo demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.