
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
Config-driven project check runner. Define your lint/format/typecheck/test steps in greenly.config.ts and run them with one command.
Config-driven project check runner. Define your lint / format / typecheck / test steps once in
greenly.config.tsand run them with a single command.
Stop copy-pasting a pr-checks script into every repo. Describe your checks in a typed config, and greenly runs them in order, streams their output, and offers to auto-fix the ones that can be fixed.
The fastest way to get going is the interactive scaffolder. It asks for a project
name, config format, script name, and which checks to include, then writes the config,
adds a "check": "greenly" script, and installs greenly. It adapts to your project:
it reuses matching package.json scripts (e.g. fmt:check, lint) when they exist,
only offers the lint/format tools you already use, and detects Next.js:
pnpx greenly init
# or: npx greenly init
Or set it up manually:
pnpm add -D greenly
Create a greenly.config.ts at your project root:
import { defineConfig } from "greenly";
export default defineConfig({
name: "MyProject",
checks: [
{ name: "TypeScript", command: "pnpm tsc --noEmit" },
{ name: "Format", command: "pnpm oxfmt --check", onFail: "pnpm oxfmt" },
{ name: "Lint", command: "pnpm oxlint" },
{ name: "Build", command: "pnpm build", optional: true },
],
});
Run it:
pnpm greenly
Or wire it into your scripts so pnpm check works too:
{
"scripts": {
"check": "greenly"
}
}
command runs in your shell with its output streamed live, so failures show up immediately.onFail, greenly asks Yes/No whether to run the fixer, then continues.optional: true warn on failure but never fail the overall run.1 if any non-optional check is still failing, otherwise 0.| Field | Type | Description |
|---|---|---|
name | string? | Project name shown in the banner. |
checks | Check[] | Ordered list of checks. |
checks[].name | string | Label shown while running and in the summary. |
checks[].command | string | () => void | Promise<void> | Shell command (e.g. "pnpm tsc --noEmit"), or a function run in-process. |
checks[].onFail | string | (ctx) => void | Promise<void> | Fixer run (after a Yes/No prompt) when the check fails. |
checks[].optional | boolean? | When true, a failure warns instead of failing the run. |
command can be a function instead of a shell string. It may be async, and it must throw (or reject) to mark the check as failed. When it throws, greenly prints only the error's message (and its cause if present) - not a stack trace - so make the message descriptive:
export default defineConfig({
checks: [
{
name: "Env vars",
command: () => {
if (!process.env.API_KEY) throw new Error("API_KEY is not set");
},
},
],
});
onFail can also be a function, useful for custom fix logic:
export default defineConfig({
checks: [
{
name: "Generated files",
command: "pnpm verify:generated",
onFail: async ({ check }) => {
await regenerate();
console.log(`Regenerated files for ${check.name}`);
},
},
],
});
Any of these are auto-discovered (first match wins, in this order):
greenly.config.ts greenly.config.mts greenly.config.cts
greenly.config.js greenly.config.mjs greenly.config.cjs
greenly.config.json
| Command / Flag | Description |
|---|---|
greenly | Run the checks from greenly.config.*. |
greenly init | Scaffold a config interactively (format, script name, checks) and install greenly. |
-y, --yes, --fix | Auto-run every onFail fixer without prompting (great for CI / agents). |
--no-fix | Run all checks, never prompt or fix, just report. |
-v, --version | Print the version. |
-h, --help | Show help. |
When stdout is not a TTY (CI, piped output), greenly is non-interactive by default, so it never prompts and nothing hangs. Use --yes there to auto-apply fixes.
MIT © Yusif Aliyev
FAQs
Config-driven project check runner. Define your lint/format/typecheck/test/custom steps in greenly.config.ts and run them with one command.
The npm package greenly receives a total of 174 weekly downloads. As such, greenly popularity was classified as not popular.
We found that greenly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.