
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
EdgeOne Pages is a front-end development and deployment platform built on Tencent EdgeOne infrastructure, designed for modern web development. It enables developers to quickly build and deploy static sites and serverless applications. By integrating edge function capabilities, it ensures efficient content delivery and dynamic functionality expansion, supporting fast access for users worldwide.
EdgeOne CLI can help you manage and debug Pages Functions in the project more efficiently.
Quickly register and log in to the Tencent Cloud Console using a Gmail account.
Create a Pages project in the Console, and clone the repository to Local.
If you are a China site user, please go to the corresponding Pages console.
In the cloned project during the preparation stage, you can use npm to install the CLI:
npm install -g edgeone
Use the edgeone -v command to check if the installation is successful. Use the edgeone -h command to view all relevant commands.
Execute the login command, follow the prompts to select Global (International) or China, then complete the login in the pop-up browser window.
edgeone login
After completing the login, you can use the edgeone whoami command to view the current login account information.
After successful login, execute the initialization command to initialize the basic environment required by Edgeone Pages in the project:
edgeone pages init
After initialization, an edge-functions or node-functions folder and sample functions will be generated in the root directory of the project. You can continue to add and develop functions in this folder.
After completing initialization, enter the local development stage:
edgeone pages dev
The run command by default creates a service locally on port 8088. Both the Pages Function service and the Pages project service run on the same port, with no need for additional proxying.
You can access the front-end page via http://localhost:8088/. In the front-end project, use the Fetch API directly, where the access path is the path of function files in folder edge-functions or node-functions.
// ./node-functions/api/my-functions.js
fetch('/api/my-functions', {
method: 'POST',
body: JSON.stringify({ data: 'example' }),
});
Note:
devCommand from edgeone.json to start your dev server. If absent, it will read the dev script from your project's package.json.If you need to use the Key-Value Storage capability or synchronize the environment variables set in the console to local debugging, you can execute the Associated Project commands, enter the project name as required. The project name here is the one created in the Preparation Work of the Pages project.
edgeone pages link
If you need to link a project that does not exist, you can also create a new project directly under the CLI guide.
Build locally and deploy to EdgeOne Pages. If you need to link an existing project, it must be of the direct upload type.
edgeone pages deploy [<directoryOrZip>] [-n <projectName>] [-e <env>]
<directoryOrZip>: Path of folder or ZIP package to deploy-n, --name: Project name for deployment (creates new or updates existing project)-e, --env: Environment to deploy to, choices: 'production' or 'preview' (default: 'production')Note:
package.json into the output directory (such as dist), and then run edgeone pages deploy ./dist.# Deploy build folder to production
edgeone pages deploy
# Deploy ZIP package to preview environment
edgeone pages deploy -e preview
Alternative: Git-based Deployment
You can also push the project code to the Git remote to trigger the CI build and deployment in the Pages backend, completing the entire development process.
If you need to switch to another Tencent Cloud account, you can execute the following command and then log in again:
edgeone switch
This section provides guidance on integrating EdgeOne CLI into your CI/CD pipelines for automated deployments.
For CI/CD pipelines, you can use the same deploy command with an API Token for authentication:
edgeone pages deploy [<directoryOrZip>] -n <projectName> -t <token> [-e <env>]
<directoryOrZip>: Path of folder or ZIP package to deploy-n, --name: Project name for deployment (creates new or updates existing project) (required)-e, --env: Environment to deploy to, choices: 'production' or 'preview' (default: 'production')-t, --token: API Token for CI/CD pipelines (required for automated deployments)Note:
node-functions, and edge-functions into the .edgeone folder and deploy to Pages.package.json to dist (suppose the output directory is dist), then rerun edgeone pages deploy ./dist.# Basic CI deployment to production with API token
edgeone pages deploy -n edgeone-pages-project -t $EDGEONE_API_TOKEN
# CI deployment to preview environment with API token
edgeone pages deploy -n edgeone-pages-project -e preview -t $EDGEONE_API_TOKEN
How to create an API Token
For more information, please refer to https://pages.edgeone.ai/document/api-token
// List all environment variables configured in the console
edgeone pages env ls
// Pull environment variables from the console to a local file
edgeone pages env pull
// Specify a local file when pulling environment variables
edgeone pages env pull -f .env.prod
// Add a new environment variable
edgeone pages env add ENV_VAR_KEY env_var_value
// Delete an environment variable
edgeone pages env rm ENV_VAR_KEY
Pages Introduction | Pages Functions
To access the China site documentation, please click here.
If you need technical support, please contact us.
FAQs
Command-line interface for TencentCloud Pages Functions
The npm package edgeone receives a total of 1,301 weekly downloads. As such, edgeone popularity was classified as popular.
We found that edgeone demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.