
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
openupm-cli
Advanced tools
The command-line tool to maintain the Unity manifest file for 3rd-party upm registries, offering a similar but lighter experience like npm or yarn for Node.js.
The tool is designed to work with the OpenUPM registry, but can also work with any upm registries, including the official Unity registry.
The command-line tool installs the 3rd-party registry as a scoped registry and maintains the Packages/manifest.json file when adding/removing packages. If the manifest file is modified, the Unity Package Manager will detect the changes and try to resolve the package dependencies.
Notice: the command-line tool does not directly install/uninstall package tarballs, at least for now.
Requires nodejs 18 or above.
Install via npm:
npm install -g openupm-cli
Or install via yarn:
yarn global add openupm-cli
If npm is not available in your CMD/PowerShell/Git-Bash, please configure your environment variables.
# for npm
c:\Program Files\nodejs
# for npm global bin
C:\Users\{yourName}\AppData\Roaming\npm
internal/modules/cjs/loader.js:818
throw err;
^
Error: Cannot find module 'node:net'
Please install Node.js 18 or above.
Use openupm add to add one or more dependencies to your project.
openupm add com.my.package@1.2.3
Checkout the commands doc page for more information.
Use openupm remove to remove one or more dependencies from your project.
openupm remove com.my.package
Checkout the commands doc page for more information.
Use openupm search to search for remote packages by name.
openupm search something
Checkout the commands doc page for more information.
Use openupm view to view detailed information about a remote package.
openupm view com.my.package
Checkout the commands doc page for more information.
Use openupm deps to print package dependencies.
openupm deps com.my.package
Checkout the commands doc page for more information.
Use openupm ls to print the names and versions of installed packages.
openupm ls
Checkout the commands doc page for more information.
There are also some global options that work for every command. You can read about them here.
We also have a few guide pages on specific topics if you need help:
Favo Yang 💻 🚧 | Ramon Brullo 💻 🚧 | Koji Hasegawa 💻 🐛 | MonoLogueChi 🐛 | Masahiro Yamaguchi 🐛 | Max Himmel 🐛 | Wilfredo Velázquez-Rodríguez 🐛 |
Christopher Arendt 🐛 | Felix Winterhalter 🐛 | Antoine Lelievre 🐛 | Tyler Temp 🐛 | Marc Bernard 📖 |
FAQs
openupm command line interface
The npm package openupm-cli receives a total of 212 weekly downloads. As such, openupm-cli popularity was classified as not popular.
We found that openupm-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.