Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
shipit-cli
Advanced tools
![Gitter](https://badges.gitter.im/Join Chat.svg)
Shipit is an automation engine and a deployment tool written for node / iojs.
Shipit was built to be a Capistrano alternative for people who don't know ruby, or who experienced some issues with it. If you want to write tasks in JavaScript and enjoy the node ecosystem, Shipit is also for you.
You can automate anything with Shipit but most of the time you will want to deploy your project using the Shipit deploy task.
Features:
npm install --global shipit-cli
npm install --save-dev shipit-cli
Once shipit is installed, you must create a shipitfile.js.
If you are familiar with grunt or gulp, you will feel at home.
shipitfile.js
module.exports = function (shipit) {
shipit.initConfig({
staging: {
servers: 'myproject.com'
}
});
shipit.task('pwd', function () {
return shipit.remote('pwd');
});
};
shipit staging pwd
You can easily deploy a project using Shipit and its plugin shipit-deploy.
shipitfile.js
module.exports = function (shipit) {
require('shipit-deploy')(shipit);
shipit.initConfig({
default: {
workspace: '/tmp/github-monitor',
deployTo: '/tmp/deploy_to',
repositoryUrl: 'https://github.com/user/repo.git',
ignores: ['.git', 'node_modules'],
keepReleases: 2,
key: '/path/to/key',
shallowClone: true
},
staging: {
servers: 'user@myserver.com'
}
});
};
To deploy on staging, you must use the following command :
shipit staging deploy
You can rollback to the previous releases with the command :
shipit staging rollback
shipit <environment> <tasks ...>
Type: String
or Array<String>
Servers on which the project will be deployed. Pattern must be user@myserver.com
if user is not specified (myserver.com
) the default user will be "deploy".
Type: String
Path to SSH key
You can add custom event and listen to events.
shipit.task('build', function () {
// ...
shipit.emit('built');
});
shipit.on('built', function () {
shipit.run('start-server');
});
Create a new Shipit task, if you are familiar with gulp, this is the same API. You can use a callback or a promise in your task.
For more documentation, please refer to orchestrator documentation.
shipit.task('pwd', function () {
return shipit.remote('pwd');
});
Create a new Shipit task that will block other tasks during its execution (synchronous).
If you use these type of task, the flow will be exactly the same as if you use grunt.
shipit.blTask('pwd', function () {
return shipit.remote('pwd');
});
Run Shipit tasks.
For more documentation, please refer to orchestrator documentation.
shipit.start('task');
shipit.start('task1', 'task2');
shipit.start(['task1', 'task2']);
Run a command locally and streams the result. This command take a callback or return a promise.
shipit.local('ls -lah', {cwd: '/tmp/deploy/workspace'}).then(...);
Run a command remotely and streams the result. This command take a callback or return a promise.
If you want to run a sudo
command, the ssh connection will use the TTY mode automatically.
shipit.remote('ls -lah').then(...);
Make a remote copy from a local path to a dest path.
shipit.remoteCopy('/tmp/workspace', '/opt/web/myapp').then(...);
Log using Shipit, same API as console.log
.
shipit.log('hello %s', 'world');
MIT
FAQs
Universal automation and deployment tool written in JavaScript.
The npm package shipit-cli receives a total of 2,848 weekly downloads. As such, shipit-cli popularity was classified as popular.
We found that shipit-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.