
Product
Introducing Socket Fix for Safe, Automated Dependency Upgrades
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.
marmot-cli
Advanced tools
A collection of cli commands for Marmot.
npm i marmot-cli -g
marmot upload
Archive the current directory as marmot-source.tgz
and upload to Marmot.
Use the following environmental variables to configure the storage location and credentials:
Key | Value |
---|---|
MARMOT_SERVER_URL | Marmot server URL |
MARMOT_ACCESS_KEY_ID | Marmot Access Key ID |
MARMOT_ACCESS_KEY_SECRET | Marmot Access Key Secret |
marmot genkey
Generate a new RSA private key that can be used for signing at ~/.marmot/rsa-key/
.
marmot pack
Pack the content from ./dist
folder into ./._temp/{APP_ID}.tar
, where APP_ID
is an environmental variable.
marmot sign
Sign the artifact generated by the pack command at ./._temp/{APP_ID}.tar
into ./_packages/{APP_ID}_{VERSION}.amr
, where APP_ID
and VERSION
are environmental variables.
marmot create
Create new app package based on templates.
$ marmot create <template> [path-to-project] [options]
For example:
$ marmot create h5-app path/to/project -c yarn
The CLI is split into two parts, bin
and lib
:
bin
contains logic for command line invocation, parsing options, parameters and environmental variables. Files inside bin
are meant to be executed directly and they should not contain business logic.lib
contains the business logic. Files inside lib
expose functions that can be used by bin
.The separation between bin
and lib
allows business logic to be unit-tested in isolated without actually running the commands.
FAQs
A collection of cli commands for Marmot.
The npm package marmot-cli receives a total of 183 weekly downloads. As such, marmot-cli popularity was classified as not popular.
We found that marmot-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Automatically fix and test dependency updates with socket fix—a new CLI tool that turns CVE alerts into safe, automated upgrades.
Security News
CISA denies CVE funding issues amid backlash over a new CVE foundation formed by board members, raising concerns about transparency and program governance.
Product
We’re excited to announce a powerful new capability in Socket: historical data and enhanced analytics.