Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
nestjs-console
Advanced tools
nestjs-console is a module that provide a cli. A ready to use service class for your modules that exposes methods to register commands and sub commands using the npm package commander
The nestjs framework is missing a cli to access the application context.
Common use case : Headless application, cront task, export data, etc...
nestjs-console provide a way to bind cli command and subcommands to providers's methods.
The console service works as a standalone process, like the classic entry point, and will initialize a NestApplicationContext (headless) instead a NestApplication. The console service will be accesible inside the container.
npm install commander nestjs-console
# or unig yarn
yarn add commander nestjs-console
Create a file at root next to your entry point named console.ts
Import your app module or any module you want to be loaded. Usually this is your main nestjs module.
You can create as many entry points as you want.
You can also extend the BootstrapConsole
class to suit your needs.
// console.ts - example of entrypoint
import { BootstrapConsole } from 'nestjs-console';
import { MyModule } from './module';
BootstrapConsole.init({ module: MyModule }).then(({ app, boot }) => {
// do something with your app container if you need (app)
// boot the cli
boot(/*process.argv*/);
});
// module.ts - your module
import { Module } from '@nestjs/common';
import { ConsoleModule } from 'nestjs-console';
import { MyService } from './service';
@Module({
imports: [
ConsoleModule // import the ConsoleModule
],
providers: [MyService]
exports: [MyService]
})
export class MyModule {}
You can now inject the ConsoleService inside any nestjs providers, controllers...
There are 2 ways of registering providers methods to the console.
Using @decorators (>=v1.1 and >=v2 for multi dimensions) or using the ConsoleService.
Example of cli stack
Cli -> Command_A -> [
Command_A1 -> execution,
Command_A2 -> execution
]
-> Command_B -> [
Command_B1 -> execution,
Command_B2 -> [
Command_B2_a -> execution
Command_B2_b -> [... more sub commands ...]
]
]
-> Command_C -> execution
As a simple example, we will define a cli with 2 commands (new and list), one of the command (new) will have 2 sub commands (directory and file)
Cli -> list -> -> execution,
-> new -> [
directory -> execution,
file -> execution
]
Registering methods using class decorators is very easy. Nestjs providers that are decorated with @Console will be scanned and each member method that is decorated with @Command will be registered on the cli.
// service.ts - a nestjs provider using console decorators
import { Console, Command, createSpinner } from 'nestjs-console';
@Console()
export class MyService {
@Command({
command: 'list <directory>',
description: 'List content of a directory'
})
async listContent(directory: string): void | Promise<void> {
// See Ora npm package for details about spinner
const spin = createSpinner();
spin.start(`Listing files in directory ${directory}`);
// simulate a long task of 1 seconds
const files = await new Promise(done =>
setTimeout(() => done(['fileA', 'fileB']), 1000)
);
spin.succeed('Listing done');
// send the response to the cli
// you could also use process.stdout.write()
console.log(JSON.stringify(files));
process.exit(0);
}
}
By default, the @Console will tell the module to register all decorated methods at root of the cli.
Example of Usage: [options] [command]
You can name your provider to use it as a parent command container. This is usefull when you have a lot of commands and you want to group them as sub command. (git style)
To achieve this, you have to group your methods into class.
You have to pass options to the @Console decorator to configure your provider as a parent command.
Decorated methods of the providers will be registered as a sub command instead of beeing registered at root.
// service.new.ts - a nestjs provider using console decorators (sub commands)
@Console({
name: 'new',
description: 'A command to create an item'
})
export class MyNewService {
@Command({
command: 'file <name>',
description: 'Create a file'
})
async createFile(name: string): void | Promise<void> {
console.log(`Creating a file named ${name}`);
// your code...
process.exit(0); // it's important to exit the process.
}
@Command({
command: 'directory <name>',
description: 'Create a directory'
})
async createDirectory(name: string): void | Promise<void> {
console.log(`Creating a directory named ${name}`);
// your code...
process.exit(0); // it's important to exit the process.
}
}
Example of Usage: new [options] [command]
Registering methods using the ConsoleService is more flexible than decorators.
When you use the ConsoleService, you simply bind your methods to the cli manually.
This is usefull if you need to create the cli or a part of the cli at runtime.
This way you can also create mutliple commands ans sub commands from the same class.
// service.ts - a nestjs provider
import { Injectable } from '@nestjs/common';
import { ConsoleService } from 'nestjs-console';
@Injectable()
export class MyService {
constructor(private readonly consoleService: ConsoleService) {
// get the root cli
const cli = this.consoleService.getCli();
// create a single command (See [npm commander for more details])
cli.command('list <directory>')
.description('List content of a directory')
.action(this.listContent);
// create a parent command container
const parentCommand = this.consoleService.subCommands(
cli,
'new',
'A command to create an item'
);
// create sub command
parentCommand
.command('file <name>')
.description('Create a file')
.action(this.createFile);
// create an other sub command
parentCommand
.command('directory <name>')
.description('Create a directory')
.action(this.createDirectory);
}
listContent = async (directory: string): void | Promise<void> => {
console.log(`Listing files in directory ${directory}`);
// your code...
process.exit(0); // it's important to exit the process.
};
createFile = async (name: string): void | Promise<void> => {
console.log(`Creating a file named ${name}`);
process.exit(0); // it's important to exit the process.
};
createDirectory = async (name: string): void | Promise<void> => {
console.log(`Creating a directory named ${name}`);
// your code...
process.exit(0); // it's important to exit the process.
};
}
Add scripts in your package.json (if you want to use them)
{
"scripts": {
// from sources
"console:dev": "ts-node -r tsconfig-paths/register src/console.ts",
// from build (we suppose your app was built in the lib forlder)
"console": "node lib/console.js"
}
}
Call the cli (production)
# using node
node lib/console.js --help
# using npm
npm run console -- --help
# using yarn
yarn console --help
Call the cli from sources (dev)
# using ts-node
ts-node -r tsconfig-paths/register src/console.ts --help
# using npm
npm run console:dev -- --help
# using yarn
yarn console:dev --help
Usage: console [options] [command]
Options:
-h, --help output usage information
Commands:
list <directory> List content of a directory
new A command to create an item
FAQs
A NestJS module that provide a cli
The npm package nestjs-console receives a total of 25,286 weekly downloads. As such, nestjs-console popularity was classified as popular.
We found that nestjs-console demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.