
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
underpost
Advanced tools
npm install -g underpost
underpost new app-name
After template installation, the server will be running on http://localhost:4001
cd app-name
Build client bundle
npm run build
Run dev client server
npm run dev
underpost [options] [command]Options:
-V, --version output the version number
-h, --help display help for command
Commands:
new [options] [app-name] Initializes a new Underpost project, service, or configuration.
start [options] <deploy-id> [env] Initiates application servers, build pipelines, or other defined services based on the deployment ID.
clone [options] <uri> Clones a specified GitHub repository into the current directory.
pull [options] <path> <uri> Pulls the latest changes from a specified GitHub repository.
cmt [options] [path] [commit-type] [module-tag] [message] Manages commits to a GitHub repository, supporting various commit types and options.
push [options] <path> <uri> Pushes committed changes from a local repository to a remote GitHub repository.
env [deploy-id] [env] [subConf] Sets environment variables and configurations related to a specific deployment ID.
static [options] Manages static build of page, bundles, and documentation with comprehensive customization options.
config [options] <operator> [key] [value] Manages Underpost configurations using various operators.
root Displays the root path of the npm installation.
ip [options] Displays the current public machine IP addresses.
cluster [options] [pod-name] Manages Kubernetes clusters, defaulting to Kind cluster initialization.
deploy [options] [deploy-list] [env] Manages application deployments, defaulting to deploying development pods.
secret [options] <platform> Manages secrets for various platforms.
dockerfile-image-build [options] Builds a Docker image from a specified Dockerfile with various options for naming, saving, and loading.
dockerfile-pull-base-images [options] Pulls required Underpost Dockerfile base images and optionally loads them into clusters.
install Quickly imports Underpost npm dependencies by copying them.
db [options] <deploy-list> Manages database operations, including import, export, and collection management.
metadata [options] [deploy-id] [host] [path] Manages cluster metadata operations, including import and export.
script [options] <operator> <script-name> [script-value] Supports a variety of built-in Underpost global scripts, their preset lifecycle events, and arbitrary custom scripts.
cron [options] [deploy-list] [job-list] Manages cron jobs, including initialization, execution, and configuration updates.
fs [options] [path] Manages file storage, defaulting to file upload operations.
test [options] [deploy-list] Manages and runs tests, defaulting to the current Underpost default test suite.
monitor [options] <deploy-id> [env] Manages health server monitoring for specified deployments.
ssh [options] Import and start ssh server and client based on current default deployment ID.
run [options] <runner-id> [path] Runs a script from the specified path.
lxd [options] Manages LXD containers and virtual machines.
baremetal [options] [workflow-id] [hostname] [ip-address] Manages baremetal server operations, including installation, database setup, commissioning, and user management.
help [command] display help for command
FAQs
pwa api rest template
The npm package underpost receives a total of 805 weekly downloads. As such, underpost popularity was classified as not popular.
We found that underpost demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.