
Company News
/Security News
Socket Selected for OpenAI's Cybersecurity Grant Program
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.
A CLI-based project manager that reads from a list of separate profiles and allows various tasks to be completed.
A CLI-based project manager that reads from a list of separate profiles and allows various tasks to be completed.
Install panko globally with Yarn.
yarn global add panko-cli
Update with Yarn.
yarn global upgrade panko-cli
Create a .pankorc file
{
"sources": {
"my-gh-account": {
"type": "github-user",
"handle": "angeloashmore",
"token": "supersecretpersonalaccesstoken",
"branch": "development"
}
}
}
Install the necessary source plugins
yarn global add panko-source-github-user
Update your project cache
panko update
panko is ready to do cool things, but you'll need some command plugins to do some really cool things. Read on.
.pankorcYour .pankorc is a JSON file that determines how panko functions.
Example .pankorc:
{
"sources": {
"my-gh-account": {
"type": "github-user",
"handle": "angeloashmore",
"token": "supersecretpersonalaccesstoken",
"branch": "development"
}
}
}
panko is a simple tool to route project metadata, such as server addresses and GitHub repository names, to panko-aware commands. It provides a method to gather project metadata from different sources. It allows for filtering which projects are passed to a command for processing.
panko gathers project information through profile files. panko source plugins
will typically look for a profile.json file in your project, however this is
configurable in your .pankorc.
The following is an example project profile.json file:
{
"name": "angeloashmore.github.io",
"repo": "git@github.com:angeloashmore/angeloashmore.github.io.git",
"arch": {
"name": "middleman",
"version": "^4.2"
}
}
name is the only required attribute for now. As commands are created, these
requirements may change.
Source plugins "source" project information. Sources can gather projects, for
example, from the filesystem, GitHub repositories, or even right in the
.pankorc file.
Sources are defined under the sources key in .pankorc. Each source has a
key and a map of options. At minimum, each source must define it's type in its
options so panko knows which plugin to run.
The following options are availble for all sources:
| Option | Description |
|---|---|
type | Required: The type of source to use. Determines which plugin to run. |
file | Name of the profile file to look for. Default: profile.json |
ttl | Amount of time in milliseconds before panko suggests refreshing the source cache. Default: 1209600000 (14 days) |
Additional options are dependent on the source plugin.
panko-source-inline: Write a profile file directly in .pankorcpanko-source-filesystem: TODO: Point to a directory of projects
in the filesystempanko-source-github-userpanko-source-github-organizationpanko-source-gitlab-groupCommand plugins perform tasks on a set projects. panko provides functionality to determine the set of projects passed to a command.
# Run the "list" command with all projects from the "github" source
panko list --source github
# Run the "list" command with all projects that have the name "personal-site"
panko list --name personal-site
# Run the "list" command with all projects from the "github" source that have
# the name "personal-site"
panko list --source github --name personal-site
panko only includes a minimal set of commands to gather project metadata and a system to call external subcommands.
| Command | Description |
|---|---|
list | List all projects |
sources | List all sources in .pankorc |
update | Update the project cache |
help | TODO: Print help message |
Other functionality, such as listing server statuses or getting page screenshots, are added by installing command plugins. See List of Command Plugins
All commands provide at least the following options:
| Option | Description |
|---|---|
--source or -a | Set which source's projects are included. Default: all sources |
--name or -n | Set which project by name is included. Default: all names |
Both options can be combined for instances where a project with the same name, but different metadata, exists in multiple sources.
panko-command-status: List server statuses and ping timespanko-command-docs: TODO: Open documentation for projectpanko-command-screenshot: Take screenshots of websitesFAQs
A CLI-based project manager that reads from a list of separate profiles and allows various tasks to be completed.
The npm package panko-cli receives a total of 5 weekly downloads. As such, panko-cli popularity was classified as not popular.
We found that panko-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.