
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
elm-github-install
Advanced tools
This gem/npm-package allows you to install Elm packages in a decentralized way from Git repositories, this allows:
If you have ruby installed on your machine then you can install it directly from rubygems.org:
gem install elm_install
If you have npm installed on your machine then you can install it directly from npm:
npm install elm-github-install -g
There are also dependency free versions available for every release in the releases page.
Once installed elm-install can be used instead of elm-package as a
replacement:
elm-package.json:
{
...
"dependencies": {
"elm-lang/core": "5.0.0 <= v < 6.0.0",
"elm-lang/svg": "2.0.0 <= v < 3.0.0",
"elm-lang/dom": "1.1.1 <= v < 2.0.0"
}
...
}
Command:
$ elm-install
Resolving packages...
▶ Package: https://github.com/elm-lang/core not found in cache, cloning...
▶ Package: https://github.com/elm-lang/svg not found in cache, cloning...
▶ Package: https://github.com/elm-lang/html not found in cache, cloning...
▶ Package: https://github.com/elm-lang/virtual-dom not found in cache, cloning...
▶ Package: https://github.com/elm-lang/dom not found in cache, cloning...
Solving dependencies...
● elm-lang/core - https://github.com/elm-lang/core (5.1.1)
● elm-lang/svg - https://github.com/elm-lang/svg (2.0.0)
● elm-lang/dom - https://github.com/elm-lang/dom (1.1.1)
● elm-lang/html - https://github.com/elm-lang/html (2.0.0)
● elm-lang/virtual-dom - https://github.com/elm-lang/virtual-dom (2.0.4)
Packages configured successfully!
Sources can be defined in the dependency-sources field in elm-package.json
for any package defined in the dependencies field.
The source can be defined as:
"elm-lang/core": "git@github.com:someuser/core"
"gdotdesign/elm-install-test": {
"url": "gdotdesign@bitbucket.org:gdotdesign/elm-install-test",
"ref": "master"
}
"elm-lang/dom": "../elm-lang/dom"
If a reference or a path is defined then the version in the dependencies field is
ignored and the version will be used from the elm-package.json at that source.
Examples:
...
"dependencies": {
"gdotdesign/elm-install-test": "1.0.0 <= v < 2.0.0",
"elm-lang/core": "5.0.0 <= v < 6.0.0",
"elm-lang/svg": "2.0.0 <= v < 3.0.0",
"elm-lang/dom": "1.1.1 <= v < 2.0.0"
},
"dependency-sources": {
"elm-lang/core": "git@github.com:someuser/core",
"elm-lang/dom": "../elm-lang/dom",
"gdotdesign/elm-install-test": {
"url": "gdotdesign@bitbucket.org:gdotdesign/elm-install-test",
"ref": "master"
}
}
...
Help for the elm-install command:
NAME:
elm-install
DESCRIPTION:
Install Elm packages from Git repositories.
COMMANDS:
help Display global or [command] help documentation
install Install Elm packages from the elm-package.json file.
GLOBAL OPTIONS:
-h, --help
Display help documentation
-v, --version
Display version information
-t, --trace
Display backtrace when an error occurs
Help for the elm-install install command.
NAME:
install
SYNOPSIS:
elm-install install
DESCRIPTION:
Install Elm packages from the elm-package.json file.
OPTIONS:
--cache-directory STRING
Specifies where the cache is stored
--verbose
It depends on your use case, but for public repositories in Github or Bitbucket it's not needed.
The following protocols can be used:
Yes private repositories are supported provided you have authentication (for example SSH keys).
FAQs
Install Elm packages directly from Git repositories
The npm package elm-github-install receives a total of 34 weekly downloads. As such, elm-github-install popularity was classified as not popular.
We found that elm-github-install demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.