
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
Elegant and unified terminal I/O for Node.js — simplify reading input, writing output, and controlling the console with ease.
Softio is a powerful, modular, and developer-friendly library that enhances console-based programming in Node.js.
With Softio, you can build clean and expressive CLI applications using a unified API for input/output, console control, formatting, event handling, and more—all in a single elegant package.
Despite JavaScript's flexibility and Node.js's extensive capabilities, building expressive and interactive console programs is still cumbersome. You often end up juggling between readline, process.stdout and other utilities—resulting in fragmented code.
Softio simplifies this by combining all essential features into one cohesive toolkit:
resize| Category | Description |
|---|---|
| 🖋️ Input | Read strings, numbers, confirmations, and more interactively. |
| 📤 Output | Write with styling, line breaks, spacing, and formatted blocks. |
| 🎨 Attr | Set foreground/background colors, styles, and cursor movement. |
| 🧱 Utils | Center text, pad content, and format outputs cleanly. |
| 🧭 Events | Listen for runtime events like terminal resize. |
Everything is accessible under a unified interface like Console.In, Console.Out, Console.Attr, etc.
Install Softio using npm:
npm install softio
Install Softio using yarn:
yarn add softio
Here’s a simple interactive program using Softio:
const Console = require('softio');
const name = Console.In.input('Enter your name: ');
const age = Console.In.readNumber('Enter your age: ');
if (age < 18) {
Console.Out.write('Sorry, you must be at least 18.');
process.exit();
}
Console.Out.writeln(Console.Utils.center(`🎉 Welcome, ${name}! 🎉`));
🔹 Run this in your terminal and see Softio in action!
🧾 Explore the full documentation:
Every module is documented with examples, parameter types, and usage patterns.
We welcome contributions! Whether you're fixing bugs, suggesting enhancements, or writing docs, we appreciate your help.
Start here 👉 Contributing Guide
Softio is licensed under the MIT License. Use it freely in personal or commercial projects.
Softio aims to make console programming expressive, simple, and elegant.
We hope it saves you time, reduces clutter, and helps you build better CLI tools.
⭐️ Star the repo to support the project and stay up-to-date with the latest features.
Happy coding! 🧠💻
FAQs
Elegant and unified terminal I/O for Node.js — simplify reading input, writing output, and controlling the console with ease.
The npm package softio receives a total of 1 weekly downloads. As such, softio popularity was classified as not popular.
We found that softio demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.