Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
fauna-shell
Advanced tools
The Fauna CLI lets you access Fauna from your terminal. You can use the CLI to:
.fsl
files on your local machine.Node.js v18.x or later.
Install the Fauna CLI globally using npm:
npm install -g fauna-shell
To upgrade the CLI, run:
npm update -g fauna-shell
For usage instructions and a full list of commands, see the Fauna docs.
You can also access help directly in the CLI by running:
# For general help:
fauna --help
# For a specific command:
fauna <COMMAND> --help
# For example:
fauna eval --help
To test changes during development, follow these steps:
Install the required packages:
yarn install
You can run commands in dev in one of two ways:
Option 1: Run against the just-in-time built project with development settings:
# Run `fauna cloud-login` in dev:
./bin/dev cloud-login
# Run `fauna eval` in dev:
./bin/dev eval
Option 2: Run against built assets. Use yarn link
to place them in
your $PATH
as if globally installed:
# Build the package and place it in your $PATH:
yarn build && yarn link
# Run CLI commands using `fauna ...`:
fauna eval
FAQs
faunadb shell
We found that fauna-shell demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.