
Product
Microsoft Teams Notifications Are Now Available in Socket
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.
Your package's adoption, on one page, on your own box.
A run reads every registry your packages live on (npm, PyPI, Docker Hub, GitHub, GitLab), appends the readings to a plain file, and rewrites one static HTML page. No account, no database, nothing to keep running. The timer is yours.
npm install -g terz-cli
mkdir adoption && cd adoption
terz init # writes terz.config.json
terz run # takes a run, writes chart.html and terz.json
List your packages once, in terz.config.json:
{
"name": "Acme",
"products": [
{
"name": "Acme CLI",
"slug": "acme-cli",
"sources": { "npm": ["acme-cli"], "pypi": ["acme-cli"] }
}
]
}
Then give the run to a timer. Once a day is right: the download APIs refresh daily, and reading them more often only spends rate limit.
0 8 * * * cd /path/to/adoption && terz run
chart.html · the chart, one self-contained file. Serve it, or open it off disk.terz.json · the same chart as a document, for the Terz apps and anything else
that wants the numbers. Schema: https://terz.dev.readings.jsonl · every reading ever taken, one JSON object per line. Append-only;
your history is a file you can read with tail and back up with cp.A source that does not answer is held, not fatal: the chart keeps the last good value, dimmed, with a tag saying how long it has been held. A missing reading is never rendered as a zero; zero is a real measurement.
Adoption and money on one page. Set a restricted, read-only Stripe key in the
environment under STRIPE_KEY_<SLUG> and give the product its Stripe account id in
the config ("stripe": "acct_…"). The next run lights up revenue, subscriptions
and MRR. A secret key is refused territory: use a restricted key, which starts
with rk_.
Proprietary, source-available. You may run it and read it; you may not redistribute
it or rehost it as a service. Full terms in LICENSE.
Hosted, with sign-in and history kept for you: https://app.terz.dev · Docs and the product: https://terz.dev · Support: support@terz.dev
FAQs
Your package's adoption, on one page, on your own box.
The npm package terz-cli receives a total of 455 weekly downloads. As such, terz-cli popularity was classified as not popular.
We found that terz-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.

Security News
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.