
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
funky-cat is the CI/CD tool for local development. Run any cli tools installed on your machine sequentially.
yarn global add funky-cat
npm install -g funky-cat
<action_name>:
workingDir: <direcotry>
commands:
- <command 1>
- <command 2>
action_name : Unique name for each action.
workingDir : Relative path/directory where the current cli tool is running on.
commands : Set of cli commands to be executed for the defined action.
Create funky-compose.yml file in the root directory of the project and define the actions:
hello_world:
commands:
- echo hello world
custom_action:
workingDir : app
commands:
- yarn install
- yarn build
Run the action : funky-cat run <action>
funky-cat run hello_world
Run multiple actions : funky-cat run|r [options] [actions...]
funky-cat run hello_world custom_action
Create a new action which runs combined action.
combined_action:
commands:
- funky-cat run hello_world custom_action
hello_world:
commands:
- echo hello world
custom_action:
workingDir : app
commands:
- yarn install
- yarn build
Run the combined action.
funky-cat run combined_action
funky-cat comes with a set of templates to bootstrap your project. To bootstrap a project from available templates, Run :
funky-cat new
This will start a prompt to select the available templates.
or
funky-cat new <template_name>
Or, if you know the template name already, pass it as <template_name> along with funky-cat new command to skip the prompt.
-c | --config : Specify the compose file. By default funky-cat uses funky-compose.yml in root directory.
funky-cat run -c my_compose_file.yml [actions...]
FAQs
The hippest jazz club in town.
We found that funky-cat demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.