
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A powerful, terminal-based focus timer with multiple notification methods to ensure you never miss when your session completes!
When your timer completes, DevPulse uses multiple notification methods for maximum impact:
🔊 System Audio Alerts
🖥️ Visual Notifications
📱 Browser Alarm Page
⚡ Terminal Features
Install from npm/Bun registry:
# Using Bun (recommended)
bun add -g devpulse
# Or using npm
npm install -g devpulse
Install from source:
git clone <repository-url>
cd devpulse
bun install
bun link
git clone <repository-url>
cd devpulse
bun install
# Quick test (1 minute)
devpulse focus 1
# Standard sessions
devpulse focus 25 # 25-minute Pomodoro
devpulse focus 45 # 45-minute extended focus
devpulse break 5 # 5-minute break
# Check your progress
devpulse log # Today's sessions
devpulse report # Weekly summary
# Get help
devpulse --help
devpulse --version
# Start a 25-minute focus session
bun run src/index.ts focus
# Start a custom focus session (e.g., 45 minutes)
bun run src/index.ts focus 45
# Start a 5-minute break
bun run src/index.ts break 5
# View today's sessions
bun run src/index.ts log
# Weekly summary
bun run src/index.ts report
# Test all notification methods
bun run test-notifications.ts
# Test just the sound alerts
bun run test-sound
# Quick timer test (6 seconds)
bun run test-timer
devpulse/
├── src/index.ts # Main application
├── alerts/
│ ├── alarm.html # Enhanced browser notification
│ └── play-sound.sh # Multi-method sound script
├── data/logs.json # Session history
└── test-notifications.ts # Notification test suite
The notification system is designed to work across different Linux environments:
No sound?
speaker-test -t sine -f 800 -l 1sudo apt install alsa-utils pulseaudio-utils soxNo desktop notifications?
sudo apt install notification-daemonBrowser popup not opening?
xdg-open works: xdg-open https://google.combun add -g devpulse):# Quick test (1 minute)
devpulse focus 1
# Standard sessions
devpulse focus 25 # 25-minute Pomodoro focus
devpulse focus 45 # 45-minute extended focus
devpulse break 5 # 5-minute break
# Default sessions
devpulse focus # 25-minute focus (default)
devpulse break # 25-minute break (default)
# Check progress
devpulse log # Today's sessions
devpulse report # Weekly summary
# Help & info
devpulse --help
devpulse --version
# Quick test (1 minute)
bun focus1
# Standard sessions
bun focus25 # 25-minute Pomodoro focus
bun focus45 # 45-minute extended focus
bun break5 # 5-minute break
# Default sessions
bun focus # 25-minute focus (default)
bun break # 25-minute break (default)
# Global install
devpulse log # Today's sessions
devpulse report # Weekly summary
# Local development
bun devlog # Today's sessions
bun devreport # Weekly summary
# Global install
devpulse focus 0.1 # 6-second test
# Local development
bun test # Test all notifications
bun test-sound # Test sound alerts only
# Install globally first
bun add -g devpulse
# Try this first to test all notifications:
devpulse focus 1
# If you prefer longer commands or local development:
bun run src/index.ts focus 1 # 1-minute test
bun run src/index.ts focus 25 # 25-minute focus
bun run src/index.ts break 5 # 5-minute break
bun run src/index.ts log # Today's sessions
bun run src/index.ts report # Weekly summary
Built with ❤️ using Bun - the fast all-in-one JavaScript runtime.
FAQs
A powerful terminal-based focus timer with enhanced notifications
We found that devpulse demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.