
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
flowlock-uxcg
Advanced tools
Command-line interface for FlowLock UX validation and code generation.
# Global installation (recommended)
npm install -g flowlock-uxcg
# Local installation
npm install --save-dev flowlock-uxcg
uxcg init
Initialize a new FlowLock project with interactive prompts.
Options:
Example:
uxcg init
# Follow interactive prompts
uxcg audit [--level <level>] [--fix]
Run validation checks on your UX specification with graduated validation levels.
Options:
--level <level>
- Validation level: basic|enhanced|strict (default: enhanced)--fix
- Enable auto-healing for common issues--spec <file>
- Specify spec file (default: uxspec.json)--outDir <dir>
- Output directory (default: artifacts)--inventory
- Require runtime inventory (auto-enabled for strict level)--only <checks>
- Run only specific checks (comma-separated)--skip <checks>
- Skip specific checks (comma-separated)--json
- Output results as JSON--quiet
- Suppress non-error outputValidation Levels:
uxcg inventory
first)Auto-fix capabilities:
Examples:
# Basic validation (Core 7 checks only)
npx flowlock-uxcg audit --level=basic
# Enhanced validation (default)
npx flowlock-uxcg audit
# or explicitly
npx flowlock-uxcg audit --level=enhanced
# Strict validation (requires inventory)
npx flowlock-uxcg inventory # Generate inventory first
npx flowlock-uxcg audit --level=strict
# With auto-fix at any level
npx flowlock-uxcg audit --level=basic --fix
# Custom paths
npx flowlock-uxcg audit --spec my-spec.json --outDir my-artifacts
# JSON output for CI/CD
npx flowlock-uxcg audit --level=enhanced --json
uxcg diagrams
Generate only diagram artifacts (ER and Flow diagrams).
Generates:
er.mmd
- Entity relationship Mermaid sourceer.svg
- Entity relationship diagramflow.mmd
- User flow Mermaid sourceflow.svg
- User flow diagramExample:
uxcg diagrams
uxcg export <format>
Export artifacts in specific formats.
Formats:
junit
- JUnit XML test resultscsv
- Screen inventory spreadsheetsvg
- Diagram imagesExample:
uxcg export junit
uxcg export csv
uxcg export svg
uxcg watch [options]
Watch mode for development with auto-refresh.
Options:
--cloud
- Enable cloud sync--cloudUrl <url>
- Cloud endpoint URL--projectId <id>
- Project identifierExample:
# Basic watch mode
uxcg watch
# With cloud sync
uxcg watch --cloud --cloudUrl https://flowlock-cloud.onrender.com --projectId my-project
uxcg inventory [options]
Build runtime inventory from your codebase for strict validation.
Options:
--config <path>
- Path to flowlock.config.json (default: flowlock.config.json)--out <file>
- Output file path (default: artifacts/runtime_inventory.json)--db-only
- Extract only database entities--api-only
- Extract only API endpoints--ui-only
- Extract only UI reads/writesExample:
# Build full inventory
npx flowlock-uxcg inventory
# Database entities only
npx flowlock-uxcg inventory --db-only
# Custom output location
npx flowlock-uxcg inventory --out my-inventory.json
uxcg agent [options]
Connect to FlowLock Cloud for remote command execution.
Options:
--cloud <url>
- Cloud base URL (required)--project <id>
- Project ID (default: demo)--token <token>
- Bearer token for authenticationFeatures:
Example:
uxcg agent --cloud https://flowlock-cloud.onrender.com --project my-app --token secret
After running uxcg audit
, the following files are created in the artifacts/
directory:
File | Description |
---|---|
er.mmd | Entity relationship diagram (Mermaid source) |
er.svg | Entity relationship diagram (rendered) |
flow.mmd | User flow diagram (Mermaid source) |
flow.svg | User flow diagram (rendered) |
screens.csv | Screen inventory with types and roles |
results.junit.xml | Test results for CI/CD |
gap_report.md | Detailed issues and recommendations |
acceptance_criteria.feature | Gherkin test scenarios |
0
- Success, all checks passed1
- Validation errors found2
- Invalid specification or parse errorDEBUG=*
- Enable verbose debug outputNO_COLOR
- Disable colored outputconst { spawn } = require('child_process');
// Run audit programmatically
const audit = spawn('uxcg', ['audit', '--fix']);
audit.stdout.on('data', (data) => {
console.log(`Output: ${data}`);
});
audit.on('close', (code) => {
if (code === 0) {
console.log('Audit passed!');
} else {
console.error(`Audit failed with code ${code}`);
}
});
.claude/commands/
Auto-generated command cards for Claude/Cursor:
ux-contract-init.md
- Create/refine specux-guardrails-validate.md
- Fix audit failuresux-generate-ui.md
- Scaffold componentsflow-audit-fix.md
- Close gapspackage.json
ScriptsAdd to your project:
{
"scripts": {
"flowlock:init": "uxcg init",
"flowlock:audit": "uxcg audit",
"flowlock:fix": "uxcg audit --fix",
"flowlock:watch": "uxcg watch"
}
}
npm install -g flowlock-uxcg
Run terminal as administrator or use:
sudo npm install -g flowlock-uxcg
Install Mermaid CLI:
npm install -g @mermaid-js/mermaid-cli
MIT
FAQs
FlowLock CLI for UX consistency checks
We found that flowlock-uxcg demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.