
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
CLS, a.k.a remote sloc, is a command line tool for Code Statistic of GitHub repositories through different OS platforms. The main advantage of such a tool is that it calculates by only accessing remote repositories without fetching them locally. However, to enhance accessing rate limitation as mentioned on the official site, the tool can only be used with a generated GitHub access token.
Note: upgrade Subversion to the latest one if you found that SSL handshake failed.
npm install -g cls-cli
npm rm -g cls-cli
Generate access token at first following here, and then run the command line tool with the token xxx:
cls -u aleen42 -t xxx
For more detailed helping on usage, you can run this:
cls -h
Check the version? Just do this:
cls -v
Note: if you want to have a statistic for code lines, the process will take a long time, because it should connect to remote directory and the speed should depend on your network status and the size of the repository. By the way, there is a bug when your try to have a statistic for a huge repository, which will cause 504 Gate Way timeout error of svn.
If you are stuck in calculating lines, it may be a network problem for subversion to check remote trunks, try to use proxy:
cls -u aleen42 -t xxx --proxy=http://127.0.0.1:1080 -l
The command below will remove global installation and link the command within a local cloned repository. It is helpful for debugging this tool.
npm run debug
Have an idea? Found a bug? See how to contribute.
MIT © aleen42
FAQs
code line statistic
We found that cls-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.