
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A command line tool to import/export apps from Qlik Sense Desktop or Server
The qlik-cli is a tool that enables Qlik Sense applications to integrate into a DevOps CI/CD workflows. It supports the workflow from the developer desktop to the operational server deployments. Qlik Sense represents it’s packaged application in binary form (.QVF). Binary formats cannot be effectively managed in traditional configuration management and version control systems. The QVF binary format also mixes application development with environmental configuration concerns that can only be overcome with manual procedures during operational deployment.
Make sure you have Node.js installed.
npm install qlik-cli --global
qlik-cli
Commands:
export <app> Export Qlik App to json files
import <app> Import Qlik App from json files
importAll Import all Qlik Apps
Options:
--version Show version number
--endpoint, -e Websocket endpoint used when connecting to Qlik Desktop/Server. [default: "ws://localhost:4848/"]
--path, -p Import/Output root path that contains App folders. [default: "D:\dev\qlik-cli"]
--user, -u User name used when connecting to Qlik Server. [default: "linde"]
--domain, -d User domain used when connecting to Qlik Server. [default: "DESKTOP-APOG7N6"]
--certPath, -c Path to certificates used when connecting to Qlik Server. Must include these files: client.pem, client_key.pem, and root.pem
[default: ""]
--transformPath, -t Configuration transform root path that contains App folders.
--info, -i Log info messages. [default: false]
--help Show help [boolean]
This tool was tested with Desktop 3.2.2 and Hub 3.2.1
FAQs
Import/Export tool for Qlik Apps
We found that qlik-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.