
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A terminal-native Pomodoro CLI with Bark notifications and a distinctive focus UI.
pom-tool is a lightweight Node.js terminal app for running Pomodoro sessions, tracking your focus time, and sending a completion notification to your iPhone with Bark.
Unlike generic Pomodoro apps, this one is built around two hooks:
If you want a Pomodoro timer that is:
this is the one.

pom 25pom -v or pom --versionUse it instantly:
npx pom-tool 25
Or install globally:
npm i -g pom-tool
Then run:
pom 25
Start a 25-minute Pomodoro:
pom 25
See your focus stats:
pom status
Configure Bark:
pom bark
Or set Bark non-interactively:
pom bark --url https://api.day.app/<your_key>
Show help:
pom --help
Show current version:
pom -v
pom 25
You get:
████░░░░ styleWARMUP, FLOW, PUSH, and FINISHpom status
pom status shows:
If you use Bark, pom-tool can notify your iPhone when a Pomodoro is done.
Setup:
https://api.day.app/<your_key>.pom bark
Or:
pom bark --url https://api.day.app/<your_key>
pom -v
pom --version
Most Pomodoro tools are either:
pom-tool is different because it sits at the intersection of:
That combination makes it easier to:
If you like the tool, star the repo and share your terminal setup.
This repo uses TypeScript + pnpm.
Clone and install:
git clone https://github.com/AlucPro/pom-tool.git
cd pom-tool
pnpm install
Build:
pnpm build
Run locally:
node dist/index.js 25
Or with the dev script:
pnpm dev -- 25
Link globally for local testing:
pnpm build
pnpm link --global
pom 25
Unlink:
pnpm unlink --global pom-tool
This package follows Semantic Versioning: MAJOR.MINOR.PATCH.
FAQs
A small Node.js CLI for running Pomodoro timers in your terminal.
We found that pom-tool demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.