Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
The 'meow' npm package is a CLI helper that simplifies the process of writing command-line applications in Node.js. It parses arguments, generates help text, and handles errors.
Argument Parsing
Meow parses command-line arguments and options, making them easily accessible within your application.
const meow = require('meow');
const cli = meow(`
Usage
$ foo <input>
`);
console.log(cli.input); //=> ['inputValue']
console.log(cli.flags); //=> {flagName: flagValue}
Help Text Generation
Meow automatically generates and displays help text for your CLI application based on a template you provide.
const meow = require('meow');
const cli = meow(`
Usage
$ foo <input>
Options
--rainbow, -r Include a rainbow
`);
// If the user runs the command with `--help`, meow will automatically display the help text.
Flags Customization
Meow allows you to define and customize flags for your CLI application, including setting aliases and default values.
const meow = require('meow');
const cli = meow(`
Usage
$ foo <input>
`, {
flags: {
rainbow: {
type: 'boolean',
alias: 'r'
}
}
});
console.log(cli.flags.rainbow); //=> true or false
Yargs is a powerful npm package that helps you build interactive command-line tools, by parsing arguments and generating an elegant user interface. It's more feature-rich than meow, providing a wide range of options for argument parsing, command handling, and validation.
Commander is another npm package for writing command-line applications. It's similar to meow but offers a more object-oriented approach to defining commands and options. Commander is well-suited for complex CLI applications with sub-commands.
Minimist is a minimalistic argument parsing library. Unlike meow, it focuses solely on parsing command-line arguments without any additional features like help text generation or input validation.
CLI app helper
I would recommend reading this guide on how to make user-friendly command-line tools.
--no-
prefix--version
--help
npm install meow
./foo-app.js unicorns --rainbow
#!/usr/bin/env node
import meow from 'meow';
import foo from './lib/index.js';
const cli = meow(`
Usage
$ foo <input>
Options
--rainbow, -r Include a rainbow
Examples
$ foo unicorns --rainbow
🌈 unicorns 🌈
`, {
importMeta: import.meta,
flags: {
rainbow: {
type: 'boolean',
shortFlag: 'r'
}
}
});
/*
{
input: ['unicorns'],
flags: {rainbow: true},
...
}
*/
foo(cli.input.at(0), cli.flags);
Returns an object
with:
input
(Array) - Non-flag argumentsflags
(Object) - Flags converted to camelCase excluding aliasesunnormalizedFlags
(Object) - Flags converted to camelCase including aliasespkg
(Object) - The package.json
objecthelp
(string) - The help text used with --help
showHelp([exitCode=2])
(Function) - Show the help text and exit with exitCode
showVersion()
(Function) - Show the version text and exitType: string
Shortcut for the help
option.
Type: object
Type: object
Pass in import.meta
. This is used to find the correct package.json file.
Type: object
Define argument flags.
The key is the flag name in camel-case and the value is an object with any of:
type
: Type of value. (Possible values: string
boolean
number
)choices
: Limit valid values to a predefined set of choices.default
: Default value when the flag is not specified.shortFlag
: A short flag alias.aliases
: Other names for the flag.isMultiple
: Indicates a flag can be set multiple times. Values are turned into an array. (Default: false)
$ foo -u rainbow -u cat
. Space- or comma-separated values are currently not supported.isRequired
: Determine if the flag is required. (Default: false)
Function
instead of a boolean
, which based on the given flags and other non-flag arguments, should decide if the flag is required. Two arguments are passed to the function:boolean
, true if the flag is required, otherwise false.Note that flags are always defined using a camel-case key (myKey
), but will match arguments in kebab-case (--my-key
).
Example:
flags: {
unicorn: {
type: 'string',
choices: ['rainbow', 'cat', 'unicorn'],
default: ['rainbow', 'cat'],
shortFlag: 'u',
aliases: ['unicorns'],
isMultiple: true,
isRequired: (flags, input) => {
if (flags.otherFlag) {
return true;
}
return false;
}
}
}
Type: string | boolean
Default: The package.json "description"
property
Description to show above the help text.
Set it to false
to disable it altogether.
Type: string | boolean
The help text you want shown.
The input is reindented and starting/ending newlines are trimmed which means you can use a template literal without having to care about using the correct amount of indent.
The description will be shown above your help text automatically.
Type: string | boolean
Default: The package.json "version"
property
Set a custom version output.
Type: boolean
Default: true
Automatically show the help text when the --help
flag is present. Useful to set this value to false
when a CLI manages child CLIs with their own help text.
This option is only considered when there is only one argument in process.argv
.
Type: boolean
Default: true
Automatically show the version text when the --version
flag is present. Useful to set this value to false
when a CLI manages child CLIs with their own version text.
This option is only considered when there is only one argument in process.argv
.
Type: object
Default: Closest package.json upwards
package.json as an object
.
Note: Setting this stops meow
from finding a package.json.
You most likely don't need this option.
Type: string[]
Default: process.argv.slice(2)
Custom arguments object.
Type: boolean
Default: false
Infer the argument type.
By default, the argument 5
in $ foo 5
becomes a string. Enabling this would infer it as a number.
Type: boolean | null | undefined
Default: false
Value of boolean
flags not defined in argv
.
If set to undefined
, the flags not defined in argv
will be excluded from the result.
The default
value set in boolean
flags take precedence over booleanDefault
.
Note: If used in conjunction with isMultiple
, the default flag value is set to []
.
Caution: Explicitly specifying undefined
for booleanDefault
has different meaning from omitting key itself.
Example:
import meow from 'meow';
const cli = meow(`
Usage
$ foo
Options
--rainbow, -r Include a rainbow
--unicorn, -u Include a unicorn
--no-sparkles Exclude sparkles
Examples
$ foo
🌈 unicorns✨🌈
`, {
importMeta: import.meta,
booleanDefault: undefined,
flags: {
rainbow: {
type: 'boolean',
default: true,
shortFlag: 'r'
},
unicorn: {
type: 'boolean',
default: false,
shortFlag: 'u'
},
cake: {
type: 'boolean',
shortFlag: 'c'
},
sparkles: {
type: 'boolean',
default: true
}
}
});
/*
{
flags: {
rainbow: true,
unicorn: false,
sparkles: true
},
unnormalizedFlags: {
rainbow: true,
r: true,
unicorn: false,
u: false,
sparkles: true
},
…
}
*/
Type: boolean
Default: true
Whether to use hard-rejection
or not. Disabling this can be useful if you need to handle process.on('unhandledRejection')
yourself.
Type boolean
Default: true
Whether to allow unknown flags or not.
Meow will make unhandled rejected promises fail hard instead of the default silent fail. Meaning you don't have to manually .catch()
promises used in your CLI.
See chalk
if you want to colorize the terminal output.
See get-stdin
if you want to accept input from stdin.
See conf
if you need to persist some data.
FAQs
CLI app helper
The npm package meow receives a total of 19,979,656 weekly downloads. As such, meow popularity was classified as popular.
We found that meow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.