
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
Spotin is a Spotify client for the terminal (TUI) which focuses on user convenience and being intuitive to use.
It is a part of the InTools project aiming to create a collection of interactive TUI tools.
[add screenshot here]
With snazzy theme.
Extra features not in official clients:
Install Node.js and install spotin with:
npm i -g spotin
Start it with (official client or spotifyd needs to be running):
spotin
Set up Spotify API access
For now the process is a bit manual, more automated way is yet to be implemented in future releases.
Create an App and fill out the infoClient ID and Client Secret which will be needed later.Edit Settingshttp://localhost:8888/callback to Redirect URIsSaveClient ID, replace YOUR_CLIENT_ID_HERE in the following link and open it:A_REALLY_LONG_CODE_HERE part which is the SPOTIFY_REFRESH_TOKEN to be used bellow.export SPOTIFY_CLIENT_ID="your-client-id"
export SPOTIFY_CLIENT_SECRET="your-client-secret"
export SPOTIFY_REFRESH_TOKEN="your-refresh-token"
To store credentials permanently they can be added to shell configuration like .bashrc. Another alternative could be using a tool like direnv.
However, I recommend a more secure way like using OS keychain or CLI integration with a password manager.
Example of using GNOME Keyring with a wrapper script:
#!/usr/bin/env bash
source <(secret-tool lookup spotify envrc)
/path/to/spotin
Spotin aims to be intuitive to use without requiring to first read long manuals. You should be able to use all of the functionality only by remembering few basic shortcuts.
tab switch focus to another panelx open context menuup / down arrow keys to navigate selectionenter to select or confirmesc to cancel or go back/ search in panel or menuReference of common global shortcuts is also always displayed at the bottom:
[add screenshot here]
The menu is designed to be easy and accommodating for beginners but without sacrificing speed and usability for advanced users. The point is that level of efficiency will rise gradually over time with low initial time investment and without extra effort to memorize. There are multiple ways to run actions based on the familiarity level:
enter./ can be used to search and filter down available actions. Once you find desired action press enter to run it.x/shu⏎, which can be quicker than clicking buttons in GUI programs.This is a feature missing in the official client that keeps being requested over and over without being considered.
Now with Spotin it is finally possible, this is how you can create a mixed playlist:
space in the playlist panel to toggle playlist selection.mix action from the menu and a new playlist containing 50 songs randomly picked from selected playlists will be created.enter on a selected playlist opens it, you can still browser for other playlists in case it was not the one you were looking for. Pressing enter again on already opened playlist will play it.., the track gets selected and menu actions will be applied to it. This is going to be useful for quickly adding it to liked songs or playlists in the future.Features still under development:
All commands need to be run in the root of the repo.
Development:
# Install dependencies
yarn
# Start a watch mode with hot-reload
scripts/dev spotin
# Run the dev build
node modules/spotin/build/spotin.js
Release build:
scripts/build spotin
node modules/spotin/build/spotin.js
MIT
FAQs
Spotify client for the terminal (TUI)
We found that spotin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.