Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
droplive
Command-line companion for DropLive.
npx droplive doctor
npx droplive prepare --write=off
npx droplive export --out ./source.tar.gz
DROPLIVE_TOKEN=... npx droplive deploy
Commands
droplive agent init --tool claude|codex|cursor|all --yesdroplive prepare [--write=safe|ask|off]droplive deploy [--app-id <id>] [--prod]droplive export [--out <path>]droplive doctor
export and deploy mirror the DropLive tray packer: they honor local
.gitignore files, always exclude .git, node_modules, .next, dist, and
build, and drop secret .env* files while keeping template files such as
.env.example.
deploy reads:
DROPLIVE_TOKENfor the bearer token.DROPLIVE_SERVER_URLfor the DropLive API base URL.
WINCH_ACCESS_TOKEN, WINCH_TOKEN, and WINCH_SERVER_URL are accepted as
development aliases.
FAQs
DropLive CLI for preparing, packaging, and deploying project folders.
We found that droplive demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 10 Jul 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026