Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
nodecg-io-cli
Advanced tools
The CLI to install and manage nodecg-io installations. Also helps you with nodecg-io bundle related development.
This is the cli for nodecg-io that allows you to easily manage your nodecg-io installation and helps you with nodecg-io related development.
Here's a brief overview of the available commands. More indepth usage guides of these commands will be available in the nodecg-io docs at some point.
nodecg-io install
Installs nodecg-io to your current nodecg installation into a sub-directory called nodecg-io
. Allows you to select which released version you want or if you wish to get a development install.
A production install fetches tarballs of the needed packages from the official npm registry, unpacks them, creates a package.json
with all packages in a npm v7 workspace configuration and installs dependencies that way.
A development install clones the official git repository (master
), installs dependencies, bootstraps all packages using lerna and builds all packages.
Either way at the end of the installation it will automatically add the nodecg-io directory (and samples if dev install and selected) to the bundles.paths
array of your nodecg configuration. If you don't have a nodecg configuration it will create one for you.
If you later decide that you want to add or remove a service you can just re-run nodecg-io install
. It saves your choices and makes them the default selected if you already have a installation so you can make changes to them. If you re-run the install command it will also pull the repo and rebuild if necessary in case of a development install and, in case of a production install, it will make any updates if some packages have a new patch version available. Updates of minor and major changes must be made explicitly by selecting the newer version when running the install command.
nodecg-io uninstall
Undos everything that nodecg-io install
did. It removes the nodecg-io
directory with your installation and removes nodecg-io from your nodecg configuration.
This cli follows and is versioned independently from the rest of nodecg-io like nodecg-io-core
or the services.
The following table show which versions of the cli are compatible with which nodecg-io versions:
CLI versions | nodecg-io versions |
---|---|
0.1 | 0.1 |
Currently they are the same but we will follow semver2 using semantic-release and the versions will diverge at some point.
Clone this repo, install the required dependencies and build it:
$ git clone https://github.com/codeoverflow-org/nodecg-io-cli.git
$ cd nodecg-io-cli
$ npm i
$ npm run build
Then link your current local install of the cli to your global node_modules
directory (might require sudo
on linux):
$ npm link
You can now use the nodecg-io
command and it will use your local install. You DO NOT need to rerun the link command after you make changes to the cli, unless you move it another location. While developing you may want to start a TypeScript watcher by running npm run watch
that will automatically update the JS files that are used while you make changes.
FAQs
The CLI to install and manage nodecg-io installations. Also helps you with nodecg-io bundle related development.
The npm package nodecg-io-cli receives a total of 12 weekly downloads. As such, nodecg-io-cli popularity was classified as not popular.
We found that nodecg-io-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.