
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
tyranoscript-packager
Advanced tools
This is a CLI tool for packaging Tyranoscript apps.
The official tool “Tyranno Rider” is difficult to link with external tools. Since this tool is a simple CLI tool, it can be easily integrated with CI / CD tools.
Currently only packaging for windows is possible. macOS packaging may eventually support it.
Please refer to the NW.js documentation for information on packaging desktop apps.
I think that more advanced packaging can be done by using nwjs-builder-phoenix.
If you are unfamiliar with npm, do the following.
npm install -g tyranoscript-packager
If you understand npm well and manage the tyrano app with npm, it is better to install it locally.
npm install --save-dev tyranoscript-packager
Caution! : Note that the windows and macos packages distributed on the official site contain node_modules/ and package.json, so they are overwritten by local installation.
If you don't want to install it, you can use npm link. You may need to specify sudo.
git clone git@github.com:fuji44/tyranoscript-packager.git
cd tyranoscript-packager
npm install
npm link
Just run the tyrano command at the root of the application.
If successful, a file packaged in ./dest/ is created.
The application root directory should have index.html, data/, and tyrano/.
See the command help (-h) for details.
cd $tyrano_app_root_dir
tyrano
This is an example of using via npm script.
Describe the command in package.json ...
"scripts": {
"package": "tyrano -d ./export -w 960 -H 640 -r"
}
It can be used simply by executing it with the npm run command.
npm run package
FAQs
This is a CLI tool for packaging Typescript apps.
We found that tyranoscript-packager demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.