
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Extended scripts, enhanced lifecycle hooks, integrated dependencies, and environment setup — Your all in one script execution tool.
j•ko is a script execution tool that extends scripts and integrates dependencies from external files, promoting organization and sharing.
jko:$ npm install -g jko
jko is installed correctly and check out the available options.:$ jko --help
jko.js file (or in package.json):$ jko
$ jko yourScript arg1 ... argN
jko was designed to streamline project management by organizing and sharing scripts and dependencies across projects, leveraging JavaScript’s dynamic capabilities to import files. This modular approach enables you to build complex dependency trees and automate tasks with ease.
jko.js:
import extraScripts from './extra-scripts'
import fromSomePackageScripts from 'somePackage'
import { devDependencies } from './another/path/dependencies'
import { dependencies } from 'anotherPackage/dependencies'
export default {
scripts: {
yourScript1: "someCommand",
yourScript2: function (param1, paramN) {
// do something
},
...extraScripts,
...fromSomePackageScripts.scripts
},
envFile: './path/to/.env',
dependencies: {
packageName1: "#.#.#",
packageNameN: "#.#.#",
...dependencies
},
devDependencies: {
devPackageName1: "#.#.#",
devPackageNameN: "#.#.#",
...devDependencies
},
packageManager: 'npm',
logLevel: 'error',
}
Run your script:
$ jko yourScript2 arg1 ... argN
or install your dependencies:
$ jko install
jko provides a structured and declarative way to manage scripts, and orchestrate tasks.
$pre – Defines pre-execution steps that must run before the script.$post – Specifies post-execution actions that run after the script.$catch – Handles errors within the script, allowing custom error responses.$disable – Prevents a specific script from executing.$comment – Adds a descriptive remark for a specific script.export default {
scripts: {
"$pre (yourScript)": "echo 'Preparing for ...'",
"yourScript": "someCommand",
"$comment (yourScript)": "This script will ..."
"$post (yourScript)": "echo 'Done!'",
"$catch (yourScript)": "echo 'An error occurred during execution!'",
"$disable (yourScript2)": function (param1, paramN) {
// do something
}
}
}
Run your script:
$ jko yourScript arg1 ... argN
FAQs
Extended scripts, enhanced lifecycle hooks, integrated dependencies, and environment setup — Your all in one script execution tool.
The npm package jko receives a total of 3 weekly downloads. As such, jko popularity was classified as not popular.
We found that jko demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.