
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
I hereby declare thee built.
hereby is a simple task runner.
$ npm i -D hereby
$ yarn add -D hereby
Tasks are defined in Herebyfile.mjs. Exported tasks are available to run at
the CLI, with support for export default.
For example:
import { execa } from "execa";
import { task } from "hereby";
export const build = task({
name: "build",
run: async () => {
await execa("tsc", ["-b", "./src"]);
},
});
export const test = task({
name: "test",
dependencies: [build],
run: async () => {
await execa("node", ["./out/test.js"]);
},
});
export const lint = task({
name: "lint",
run: async () => {
await runLinter(...);
},
});
export const testAndLint = task({
name: "testAndLint",
dependencies: [test, lint],
});
export default testAndLint;
export const bundle = task({
name: "bundle",
dependencies: [build],
run: async () => {
await execa("esbuild", [
"--bundle",
"./out/index.js",
"--outfile=./out/bundled.js",
]);
},
});
Given the above Herebyfile:
$ hereby build # Run the "build" task
$ hereby test # Run the "test" task, which depends on "build".
$ hereby # Run the default exported task.
$ hereby test bundle # Run the "test" and "bundle" tasks in parallel.
hereby also supports a handful of flags:
-h, --help Display this usage guide.
--herebyfile path A path to a Herebyfile. Optional.
-T, --tasks Print a listing of the available tasks.
hereby is implemented in ES modules. But, don't fret! This does not mean that
your project must be ESM-only, only that your Herebyfile must be ESM module so
that hereby's task function can be imported. It's recommended to use the
filename Herebyfile.mjs to ensure that it is treated as ESM. This will work in
a CommonJS project; ES modules can import CommonJS modules.
If your package already sets "type": "module", Herebyfile.js will work as
well.
hereby supports Herebyfile.mts and Herebyfile.ts, so long as your runtime
supports loading these files. This includes like Node's type stripping, bun,
or even a custom loader, and so on.
hereby does not support running tasks in series; specifying multiple tasks at
the CLI or as dependencies of another task will run them in parallel. This
matches the behavior of tools like make, which like hereby intend to encode
a dependency graph of tasks, not act as a script.
In general, if you're trying to emulate a serial task, you will likely be better served by writing out explicit dependencies for your tasks.
hereby will only run each task once during its execution. This means that
tasks which consist of other tasks run in order like a script cannot be
constructed. For example, it's not possible to run "build", then "clean", then
"build" again within the same invocation of hereby, since "build" will only be
executed once (and the lack of serial tasks prevents such a construction
anyway).
To run tasks in a specific order and more than once, run hereby multiple
times:
$ hereby build
$ hereby clean
$ hereby build
1.11.1
FAQs
A simple task runner
The npm package hereby receives a total of 17,781 weekly downloads. As such, hereby popularity was classified as popular.
We found that hereby demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.