
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
CLI to create merge requests / pull requests from templates for GitLab and GitHub
Create Merge Requests and Pull Requests faster than ever — with templates, multi-step deployment chains, and secure token management.
mrkit-cli (command: mr) is a powerful, developer-friendly CLI tool that streamlines working with:
main → dev → stage → prod)npm install -g mrkit-cli
Verify installation:
mr --help
mr config init
You will be prompted for:
All sensitive data is encrypted with AES-256 and stored in:
~/.mr-cli/config.json
Required scopes: api, read_repository, write_repository
mr config init and paste it when promptedRequired scopes: repo (includes public_repo & repo), workflow (optional)
mr config init and paste itYour tokens are immediately encrypted using the password you provide.
mr config initmr create or mr chain run, the CLI temporarily decrypts tokens after you enter the correct passwordmr config init # First-time setup (interactive)
mr config reset # Wipe all config (tokens, projects, etc.)
mr config set <key> <value> # Set a specific config value
mr config list # Show current (decrypted) config
mr template add # Create a new reusable template (interactive)
mr template list # List all templates
mr template show <name> # View template details
mr template remove <name> # Remove a template
mr create my-template # Using a saved template
mr create # Fully interactive mode
Perfect for environments like main → dev → stage → prod
mr chain add # Create a new chain template
mr chain list # List all chain templates
mr chain show <name> # View chain details
mr chain remove <name> # Remove a chain template
mr chain run deploy-prod # Execute all steps in sequence
mr chain run deploy-prod --open # Open the final MR/PR in browser
Example output:
[1] https://gitlab.com/org/app/-/merge_requests/123
[2] https://gitlab.com/org/app/-/merge_requests/124
[3] https://gitlab.com/org/app/-/merge_requests/125 ✔️ Opened
mr project add # Add a frequently used GitLab/GitHub project
mr project list # List saved projects
Saved projects appear as quick-select options during template/chain creation.
--open| Issue | Solution |
|---|---|
| Failed to decrypt token | Enter the exact password used during mr config init |
| Branch not found | Ensure the source branch exists remotely (git push) |
| Template/chain not appearing | Run mr template list or mr chain list to verify |
| Wrong project selected | Use mr project list and re-add correct ones |
| Browser not opening (spinner) | The CLI stops the spinner before opening URLs (fixed in latest version) |
# 1. Create a reusable MR template
mr template add
# → choose project, source: feature/x, target: dev, title/description, etc.
# 2. Open a new MR in seconds
mr create feature-x-template
# 3. Create a deployment chain (main → dev → prod)
mr chain add
# → define 2 steps: main→dev, then dev→prod
# 4. Deploy with one command
mr chain run prod-deployment --open
✅ Fully encrypted token storage (AES-256)
✅ Works seamlessly with GitLab and GitHub
✅ Single and multi-step (chain) MR/PR automation
✅ Reusable templates & chain templates
✅ Interactive prompts with sensible defaults
✅ Saved projects for ultra-fast selection
✅ Built for maximum developer productivity
Made for developers who hate repetitive merge request forms.
Start automating your workflow today:
npm install -g mrkit-cli
mr config init
mr create # ← feel the speed
Happy merging! 🚀
FAQs
CLI to create merge requests / pull requests from templates for GitLab and GitHub
The npm package mrkit-cli receives a total of 1 weekly downloads. As such, mrkit-cli popularity was classified as not popular.
We found that mrkit-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.