
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
opusfluxus
Advanced tools
NodeJS wrapper for WorkFlowy. Created for integration with Complice, a productivity app that's less "what are all the parts of this thing I have to do?" and more "what am I going to do today?"
This was forked from ruxi/workflowy (which apparently doesn't exist anymore!) and improvements are:
Also this project is in JavaScript, so if you prefer that to working in CoffeeScript, you've come to the right place.
(I'm planning to get rid of Q and use bluebird or native Promises though, plus many other structural improvements.)
createTree and createTrees functionsgetAuthType(email) function, that takes an email and returns "password", or "code" (it might also return "google" but it also seems maybe they removed it).~/.wfconfig.json instead of ~/.wfrcfunction (_this) {return function (actual) {}})() constructs (maybe those looked saner in the original coffeescript?)includeSharedProjects setting, which modifies the workflowy tree so that external shared projects are part of the tree (pass to Workflowy constructor as property of auth object)resolveMirrors: false in the constructor, it will automatically make mirrored bullets show up in the right places in the treenpm install --save opusfluxus
sudo npm install --global opusfluxus
wf # run this once to ensure you're authenticated
Currently only has two features. One is to print your list (wf tree 1 prints just top-level nodes, wf tree 2 prints those and their children, etc) and the other is to append datapoints to a given node.
Thanks to sujunmin this now has a bunch of options:
tree [n] print your workflowy nodes up to depth n (default: 2)
[--id=<id/alias>] print sub nodes under the <id> (default: whole tree)
[--withnote] print the note of nodes (default: false)
[--hiddencompleted] hide the completed lists (default: false)
[--withid] print id of nodes (default: false)
Use Workflowy for tasks but wish you had a quicker way to capture things to your inbox? Now you can do that! Well, it takes a little set-up, but once you've got it it's awesome.
The command is capture, and here's the spec:
capture add something to a particular node
--parentid=<id/alias> 36-digit uuid of parent (required) or defined alias
--name=<str> what to actually put on the node (required)
[--priority=<int>] 0 as first child, 1 as second (default 0 (top))
(use a number like 10000 for bottom)
[--note=<str>] a note for the node (default '')
wf capture --parentid "<36-digit uuid>" --priority=0 --name ""
How to get the parentid:
<div class="project" projectid="00000000-0000-0000-0000-000000000000">Priority = 0 (which is default) inserts the item at the top. You can use a very big number to force it to submit at the bottom instead.
I have the following in .bash_aliases, which allows me to instantly capture any todo to a node appropriately called inbox.
alias win="wf capture --parentid='00000000-0000-0000-0000-000000000000' --name"
So then I just open terminal and type `win "1) call Benjamin #thursday"
Oh, and by the way, that task then gets automatically pulled onto thursday's todo list, thanks to Complice.
Always giving the parentid as an uuid might not be convenient, so you can also add aliases for them.
alias list all currently defined aliases
alias add add new alias
--id=<id> 36-digit uuid to alias (required)
--name=<alias> name to give the alias (required)
alias remove remove existing alias
--name=<str> name to give the alias (required)
For an easier configuration, you can put a file aliases.json in the folder you will call opusfluxus from 🙂
{
"inbox": "00000000-0000-0000-0000-000000000000",
"todo": "00000000-0000-0000-0000-000000000000",
"reccomendations": "00000000-0000-0000-0000-000000000000"
}
FAQs
NodeJS wrapper for Workflowy (+ terminal client)
We found that opusfluxus demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.