
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
char-spinner
Advanced tools
Put a little spinner on process.stderr, as unobtrusively as possible.
import { spinner } from 'char-spinner'
// All options are optional
// even the options argument itself is optional
const clear = spinner(options)
// the return value is the clear function
// call it to stop the spinner
clear()
Usually the defaults are what you want. Mostly they're just configurable for testing purposes.
stream Output stream. Default=process.stderrtty Only show spinner if output stream has a truish .isTTY. Default=truestring String of chars to spin. Default='/-\\|'interval Number of ms between frames, bigger = slower. Default=50cleanup Print '\r \r' to stream on process exit. Default=trueunref Unreference the spinner interval so that the process can
exit normally. Default=truedelay Number of frames to "skip over" before printing the spinner.
Useful if you want to avoid showing the spinner for very fast
actions. Default=2promise Pass in a promise or promise-returning function if
you want it to automatically stop spinning when the promise
resolves.Returns the generated interval, if one was created.
FAQs
Put a little spinner on process.stderr, as unobtrusively as possible.
The npm package char-spinner receives a total of 195,433 weekly downloads. As such, char-spinner popularity was classified as popular.
We found that char-spinner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.