
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
nitya.connect
Advanced tools
A minimal CLI utility to interact with the Nitya Sponsor Server, allowing developers to securely manage Arweave wallets, initialize deployments, and request sponsor credits for event-based pools.
npm install -g nitya.connect
This will install the following global CLI commands:
nityabeginnityafuelnityabeginInitialize or inspect your local project wallet.
nityabegin --projectname <project>
Creates a new Arweave wallet for the given project in:
~/.permaweb/<project>/wallet.json
nityabegin --wallet-address
Prints the address of your most recently created wallet.
nityabegin --event <eventPoolId>
Creates a perma-config.json in your working directory:
{
"walletAddress": "arweave-address",
"eventPoolId": "pool-id",
"walletPath": "/home/user/.permaweb/<project>/wallet.json"
}
nityafuelRequest deploy credits from an event-based sponsor pool.
nityafuel --projectname <project>
Looks for:
~/.permaweb/<project>/wallet.jsonperma-config.jsonSigns the pool ID and submits it to the sponsor server:
POST http://167.86.105.114/share-credits
Success response:
{
"message": "Credits shared successfully",
"txId": "arweave-tx-id",
"amount": "1000000000000"
}
~/.permaweb/
└── <project>/
└── wallet.json
./perma-config.json # Linked config
~/.permaweb/.Must be used with a compatible Nitya Sponsor Server exposing:
POST /share-creditsLicensed under the GNU Affero General Public License v3.0.
See the LICENSE file for full terms.
FAQs
Client-side tools for users request Turbo credits from sponsor pools
We found that nitya.connect demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.