
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Welcome to the main entry point to the Stencila ecosystem. This repo contains the stencila
command line tool which is the top level 'umbrella' package to use our various libraries.
:sparkles: We are are undergoing a major reboot in this repository (and many of our others) to build a single entry point for reproducible documents. We will deprecate
stencila/cli
andstencila/desktop
and instead build those binaries here. We will also be deprecating binary builds of our other repositories as they are integrated into this one.
Stencila is available as a pre-compiled, standalone command line tool.
To install the latest release of the stencila
command line tool, download stencila-win-x64.zip
for the latest release and place it somewhere on your PATH
.
To install the latest release of the stencila
command line tool to /usr/local/bin
just use,
curl -L https://raw.githubusercontent.com/stencila/stencila/master/install.sh | bash
To install a specific version, append -s vX.X.X
e.g.
curl -L https://raw.githubusercontent.com/stencila/stencila/master/install.sh | bash -s v0.33.0
Or, if you'd prefer to do things manually, download stencila-macos-x64.tar.gz
for the latest release and then,
tar xvf stencila-macos-x64.tar.gz
sudo mv -f stencila /usr/local/bin # or wherever you like
To install the latest release of the stencila
command line tool to ~/.local/bin/
just use,
curl -L https://raw.githubusercontent.com/stencila/stencila/master/install.sh | bash
To install a specific version, append -s vX.X.X
e.g.
curl -L https://raw.githubusercontent.com/stencila/stencila/master/install.sh | bash -s v0.33.0
Or, if you'd prefer to do things manually, or place stencila elsewhere, download stencila-linux-x64.tar.gz
for the latest release and then,
tar xvf stencila-linux-x64.tar.gz
mv -f stencila ~/.local/bin/ # or wherever you like
FAQs
Living documents for reproducible research.
The npm package stencila receives a total of 0 weekly downloads. As such, stencila popularity was classified as not popular.
We found that stencila demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.