
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
This is the official Codehawk client.
For more information on what Codehawk is, please visit the website.
Install this module globally, configure your project then simply run codehawk in your project root:
npm install -g codehawkcd /to/your/projecttouch hawk.jsonhawk.json configuration contains your project token, and configure any options in here.codehawkYou will be prompted to login on the first run, using your login token which can be grabbed from your dashboard on Codehawk.app.
To customise your analysis, use the following options, placed in a hawk.json file in the root directory.
| Option | Description | Default |
|---|---|---|
uploadToken | REQUIRED Your project upload token, taken from https://codehawk.app | '' |
extensions | File extensions that should be analyzed. The default is always used, but you can add more extensions. Use the exclude option to skip any of the default extensions. | ['.js', '.jsx', '.ts', '.tsx'] |
excludeFilenames | Filename matches that should be excluded from analysis. The default is always used, but you can add more matches to be excluded. Note that the matching is exact. The exclude list is taken into consideration after the extension list. | ['.d.ts', '.min.js', '.bundle.js'] |
excludeDirectories | Directory matches that should be excluded from analysis (but will still show on Codehawk). Relative to the root. E.g. ['/fixtures', '/test'] | ['/dist', '/bin', '/build'] |
skipDirectories | Directories that should be excluded completely (never sent to Codehawk). The defaults will always be skipped. | ['/node_modules', '/flow-typed', '/coverage'] |
Codehawk supports many types of javascript source out of the box:
Note that Codehawk cannot understand certain obscure syntax or recently released Flow or TypeScript features, but the client will warn you during usage in this case. Please email us in this scenario so that we can improve Codehawk.
For troubleshooting and support, please contact support at support@codehawk.app, or reach out to Sam. Feedback also welcome!
(c) Copyright 2019 Sgb Digital Services Ltd, all rights reserved.
FAQs
CodeHawk client
The npm package codehawk receives a total of 24 weekly downloads. As such, codehawk popularity was classified as not popular.
We found that codehawk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.