
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
🚀 A simple background process manager for npm dev commands
devctl is a lightweight command-line tool that runs your npm run dev command in the background and provides simple management commands. Free up your terminal during development while automatically logging all server output.
npm run dev in the background, freeing up your terminal# Global installation (recommended)
npm install -g devctl
# Or install in your project
npm install --save-dev devctl
# Start development server (in background)
devctl start
# Check server status
devctl status
# View real-time logs
devctl logs
# Stop server
devctl stop
# Restart server
devctl restart
| Command | Description |
|---|---|
devctl start | Start npm run dev in background |
devctl stop | Stop the development server |
devctl restart | Restart the development server |
devctl status | Check server running status |
devctl logs | View real-time logs |
Start development server:
devctl start
Example output:
🚀 Starting development server...
✅ Development server started!
📝 Process ID: 12345
📄 Log file: ./logs/dev.log
If the server is already running:
❌ Development server is already running! PID: 12345
💡 Use 'devctl stop' to stop the server
Check status:
devctl status
Example output:
✅ Development server is running
📝 Process ID: 12345
📄 Log file: ./logs/dev.log
🕐 Uptime: 01:23:45
View logs:
devctl logs
This will display real-time output from the development server.
devctl creates a logs folder in your project root:
logs/
├── dev.log # Development server logs
└── dev.pid # Process ID file
dev.log: Records all console output from npm run dev (cleared on each start)dev.pid: Stores the current running process IDdevctl start executes npm run dev and runs it in the backgroundlogs/dev.log file (cleared on each start)logs/dev.pid fileIf your development server reports that the port is already in use, this is normal. devctl doesn't control port allocation; it only proxies the npm run dev command.
Warning: Process not found, cleaning up PID file
This is normal cleanup behavior. Simply restart:
devctl start
Ensure you have write permissions in the project directory to create the logs folder.
# Clone the project
git clone <repository-url>
cd devctl
# Install dependencies
npm install
# Build project
npm run build
# Link globally (for testing)
npm link
# Run all checks (recommended before committing)
npm run check
# Run individual checks
npm run typecheck # TypeScript type checking
npm run lint # ESLint code checking
npm run test # Run tests
# Code formatting
npm run format # Format all code
npm run format:check # Check formatting status
# Fix ESLint issues
npm run lint:fix
This project uses Husky + lint-staged to ensure code quality. When committing code, it will automatically:
# Add files to staging area
git add .
# Commit (will automatically trigger checks)
git commit -m "feat: add new feature"
This project is licensed under the MIT License.
FAQs
A simple background process manager for npm dev commands
We found that devctl demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.