
Security News
Deno 2.6 + Socket: Supply Chain Defense In Your CLI
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.
Run all your NPM scripts faster with fuzzy matching
Features:
yarn.lock file is found, yarn <script> will be used instead of npm run <script>-- to pass extra options when using NPMnpm install -g fuzz-run
fr <fuzzy_script_name>
If no arguments is provided, it will list all available scripts.
As the name of the script to run is fuzzy matched, you can try:
t for test scripttc for test:ci scriptets for test scriptNote that you can use the alias nr (for npm run) instead of fr (fuzz run) if you prefer :wink:
You can also integrate this script runner in your own CLI by using the function fuzzyRun(args, runner):
args: array of arguments, the same you would use for the CLI usagerunner: optional, can be 'npm' or 'yarn' to force a specific command to run the scripts. If null or undefined, it will be autodetected based on the presence of the yarn.lock file.Example:
const fuzzyRun = require('fuzzy-run');
fuzzyRun(process.argv.slice(2));
Why making a new tool when some other exists, you might ask?
Both are based on fuse.js for the fuzzy matching, which is not great for matching commands, as it doesn't weight properly specific features like subcommands separation (using characters like -, _, :) or first character of words :disappointed:
Some examples:
test and test:ci, typing tc matches test instead of test:citest:ci and other, typing t matches otherSo I benchmarked many fuzzy matching libraries, and kept the best one I found suited for the job, fuzzysort, that solves these issues.
FAQs
Run all your NPM scripts more easily with fuzzy matching
The npm package fuzz-run receives a total of 42 weekly downloads. As such, fuzz-run popularity was classified as not popular.
We found that fuzz-run demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.

Security News
New DoS and source code exposure bugs in React Server Components and Next.js: what’s affected and how to update safely.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.