
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Waiting for PRs getting merged and new version getting released sometimes can be a long process. And I do understand sometimes an annoying bug could block the progress of your projects, or you are just excited to try the new feature.
So I made Knightly, trying to make the nightly build process universally available to any projects. Don't get frustrated when the maintainers are not available to make releases. And maintainers could also have less pressure to make everything on schedule.
No more "when will this be merged?" or "when will x.x.x be released?" - If you really need them, just use the nightly builds before the official release came out!
NPM Demo: vuejs/vue-next@ref-sugar
Community maintained builds will be published under the @knightly npm org. You can find the active build tasks in knightlyjs/tasks.
It's currently a manual process. Submit your request issue for repos you would like to enable Knightly on, and we will add it for you.
Once the repo enables Knightly, everyone can pin @knightly-bot in a PR, like:
@knightly-bot build this

The bot will leave a comment asking the community to vote on it.

If the comment receives 10 thumbs up 👍. The nightly build for the PR will be enabled automatically.

Scripts for the bot can be found in knightlyjs/bot
🚧 Support for project owners / maintainers to make official nightly builds on their own will be added later. We are currently focusing on Community Maintained Builds support.
🚧 This project is still under heavy development, the APIs may change without advance notice. You can use TypeScript auto-completion for now.

This project is part of my Sponsor Program
MIT
FAQs
Unknown package
The npm package knightly receives a total of 3 weekly downloads. As such, knightly popularity was classified as not popular.
We found that knightly demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.