
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
A modern, lightweight library for handling colors, styles, and Unicode characters in the terminal.
mauw is a library written in TypeScript focused on efficient color and style management for the terminal. It provides modern utilities for working with RGB, HEX, backgrounds, static variants, and Unicode character support, offering smart fallbacks for environments where certain symbols or colors are not available.
Designed with a focus on performance, strong typing, and minimal weight, mauw is ideal for CLIs, development tools, and terminal applications that seek consistent visual output without sacrificing speed or simplicity.
mauw prioritizes explicitness, composability, and performance. No hidden state, no magic globals, no unnecessary abstractions.
mauw is designed to be fast and lightweight, with minimal startup and runtime overhead, making it suitable even for short-lived CLI commands.
npm install mauw
mauw provides a simple and expressive API for styling terminal output using colors and Unicode-safe utilities.
mauw is optimized for functional composition. Property chaining is supported for convenience, but functional composition is the recommended and fastest approach.
import mauw from 'mauw/colors';
console.log(
mauw.rgb(255, 0, 0)('Red text'),
mauw.hex('#00ff99')('Green text')
);
import mauw from 'mauw/colors';
console.log(
mauw.bgRgb(30, 30, 30)('Dark background'),
mauw.bgHex('#1e1e1e')('HEX background')
);
import mauw from 'mauw/colors';
console.log(mauw.bgRgb(200, 40, 40).bold('Highlighted text'));
console.log(mauw.bgRgb(200, 40, 40)(mauw.bold('Highlighted text')));
import { COLORS_ENABLED } from 'mauw/colors';
if (COLORS_ENABLED) {
console.log('Colors are enabled in this terminal');
}
import character from 'mauw/characters';
console.log(character.checkmark, 'Task completed');
See the full benchmark suite in the
bench/directory.
mauw is built with performance as a first-class concern. Its core focuses on minimizing allocations, avoiding unnecessary string operations, and favoring functional composition over heavy chaining mechanisms.
In practice, this results in:
Benchmarks show that mauw consistently outperforms popular alternatives in basic coloring, nested styles, and composition patterns, while also producing less garbage for the runtime to clean up.
All performance claims are fully reproducible.
To manually verify and compare results, you can run the benchmark suite included in the repository:
npm install
node bench/load.ts
node bench/dryrun.ts
node bench/performance.ts
This will execute real-world scenarios comparing mauw against other well-known libraries, allowing you to validate execution time, memory usage, and composition cost on your own machine.
Performance may vary depending on runtime, CPU, and OS, but relative efficiency remains consistent.
Thanks to these amazing people:
MIT © Kkotero
Issues and pull requests are welcome.
FAQs
A lightweight, chainable, and functional terminal colors library for Node.js with Unicode character support and graceful fallbacks.
The npm package mauw receives a total of 8 weekly downloads. As such, mauw popularity was classified as not popular.
We found that mauw demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.