Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
By Feross Aboukhadijeh - Aug 04, 2026
🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP →
hermai-cli
npm wrapper for the hermai CLI — turns any website into a structured JSON API for AI agents.
Install
npm install -g hermai-cli
# or
npx hermai-cli --help
On install, the package's postinstall downloads the correct prebuilt
binary for your platform (macOS/Linux/Windows × amd64/arm64) from the
corresponding GitHub release, verifies its sha256 against the release's
checksums.txt, and places it alongside the wrapper. No cgo, no Go
toolchain required.
Environment
HERMAI_PLATFORM_KEYauthenticates registry requests. You can also runhermai registry loginonce to store the key in local Hermai config.HERMAI_SKIP_POSTINSTALL=1skips the binary download at install time. Useful in sandboxed CI where outbound network to GitHub releases is blocked; you'll need to drop the binary atnode_modules/hermai-cli/bin/hermaiyourself.
Other install channels
brew install hermai-ai/hermai/hermai(Homebrew, macOS/Linux)go install github.com/hermai-ai/hermai-cli/cmd/hermai@latest(Go toolchain)- GitHub Releases tarballs — https://github.com/hermai-ai/hermai-cli/releases
Usage
See docs.hermai.ai.
License
AGPL-3.0-or-later — same as the upstream binary.
FAQs
Turn any website into a structured JSON API for AI agents.
The npm package hermai-cli receives a total of 18 weekly downloads. As such, hermai-cli popularity was classified as not popular.
We found that hermai-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 24 May 2026
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
By Socket Research Team - Aug 04, 2026
Security News
Claude Breached 3 Companies and Uploaded Malware to PyPI During Anthropic's Security Tests
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.
By Sarah Gooding - Jul 31, 2026