
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
MoxciMoxci is a tool that will send notification to Pull Requests and Slack channel when a Pull Request is made. It will send the url of the CircleCI artifact.
This repository is inspired by expo-qr-notify by @watanabeyu
It can be used to send a link of latest storybook, or preview of your website built in the Pull Request.
You can install moxci via npm or yarn
npm install moxci
or
yarn add -D moxci
You can also run moxci in your CI wirhout installing the package by using npx.
By using this, you will always be running the latest moxci package.
npx moxci /path/to/artifact
In order to user moxci, you will need to set up a CircleCI project.
In your Project Settings -> Environment Variables, enter your Circle CI API Token as CIRCLE_TOKEN, and Github API Token as GITHUB_TOKEN
In your config.yml for CircleCI, add commands to specify the path that contains the artifact you'd like to notify.
- store_artifacts:
path: artifact
- run:
name: "Notify Artifact in Pull Request"
command: npx moxci path/to/artifact
When you send a Pull Request, the account tied to your GITHUB_TOKEN will send a link of the artifact.
moxci can also notify your CircleCI artifact to your slack channel!
Create an incoming webhook for your slack channel that you would like to notify.
Add the webhook URL as SLACK_WEBHOOK in your environment variables in CircleCI Project Settings.
Special Thanks to @Leko for the original PR notification script.
FAQs
tool to notify artifact to pr
The npm package moxci receives a total of 0 weekly downloads. As such, moxci popularity was classified as not popular.
We found that moxci demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.