
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
octopus-cli
Advanced tools
An opinionated tool for building, managing and releasing a multi-module npm projects.
npm install -g octopus-cli
Managing mono-repo or multi-module npm-based repos is hard and cumbersome. Some challenges that octo
tries to solve:
Run octo init
that will:
octopus.json
if there is no one present.octopus.json
is a configuration file for octo
which can contain:
dependencies
are enforced both for npm dependencies
and devDependencies
.Example:
{
"engine": "yarn",
"scripts": {
"clean": "echo run me before each bootstrapped module if -c is provided"
},
"exclude": ["some-module-to-exclude"],
"dependencies": {
"chai": "~3.5.0",
"eslint": "~3.10.2"
},
"peerDependencies": {
"eslint-plugin-mocha": ">=2.0.0"
}
}
octo
is a command line tool for:
octo bootstrap -n && octo run build test
) (with support of building only changed modules with proper module graph support);octo run test
, octo exec 'echo 1'
;octo modules
;octo deps
;octo idea
;octo selfupdate
.Should be used both for adding octo support for new project and setting-up local environment for cleanly checked-out octo-enabled project.
For a non-octo-enabled project:
octopus.json
if there is no one present.For octo-enabled project:
Runs npm|yarn install for all modules and also links inter-dependent modules across monorepo.
To check available options run octo help bootstrap
;
Runs scripts defined in package.json
for all|changed modules. This is useful to run tests for all modules.
Example:
octo run -a build test
Will run build
and test
scripts defined in module package.json
for all modules (-a).
To check available options run octo help run
;
Execute arbitrary script for all modules in monorepo.
Example:
octo exec -a 'rm -f .nvmrc && echo 6.9.2 > .nvmrc'
Will update version of node in .nvmrc to 6.9.2 for all modules (-a).
To check available options run octo help exec
;
Generate/regenerate Intellij idea project for all modules within repo (Note that you might need to restart idea for changes to take effect). Generated project will have:
Example:
octo idea
Manage dependencies across all modules. Common scenario is:
octo deps latest
- to get a list of dependencies, that are defined in octopus.json
and have newer version in registry.octopus.json
;octo deps sync --save
- to update package.json
for modules that need updating as per definitions in octopus.json
;octo run bootstrap -n && octo run test
- to intsall updated dependencies and run tests to verify if nothing broke.To check available options run octo help deps
;
Manage module versions and mark build/unbuild.
Common scenarion could be to update module version:
package.json
;octo modules sync --save
to update dependency version in modules that use a module with updated version.To check available options run octo help modules
;
Update version of octopus-cli:)
FAQs
Multi-module repo build helper
We found that octopus-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.