
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
commander-auto-complete
Advanced tools
Generates a bash compeletion function based on node-commander program instance
This module can be used to generate bash/zsh completion functions for a commander.js cli.
./cli.coffee example-command
Installation is 3 step process
completion.sh
file into your ~/.bashrc
or ~/.zshrc
// Your scripts definition inside your package.json might look like this:
"scripts": {
"test": "echo \"Error: no test specified\" && exit 1",
"completion": "coffee node_modules/commander-completion/index.coffee >/dev/null"
},
npm run-script completion
to generate the completion optionsCalling npm run-script completion
generates a commands.sh file which is used by the completion function to get the options for the current cli.coffee file.
(This allows the completion function (completion.sh) to work across several cli.coffee instances by storing the commands and options in a module-specific location)
This means that whenever you update your CLI with new commands or options, you should re-run npm run-script completion
.
If you want this done automatically for you, you could add that script to npm lifecycle hooks, git-hooks, or even run the coffee node_modules/commander-completion/index.coffee
directly from your ~/.bashrc
or ~/.zshrc
FAQs
Generates a bash compeletion function based on node-commander program instance
The npm package commander-auto-complete receives a total of 0 weekly downloads. As such, commander-auto-complete popularity was classified as not popular.
We found that commander-auto-complete demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.