
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
upncli)A command-line interface for managing UPN (Updateable Node.js) containers with rich terminal UI, emoji status indicators, and smart deployment features.
cd cli
npm install
npm link # Makes 'upncli' available globally
Setup a project:
upncli setup my-app
Deploy your application:
upncli deploy my-app
Stream logs:
upncli logs my-app --follow
upncli setup <appFolder>Interactive configuration setup for a project.
Features:
Example:
upncli setup my-node-app
upncli deploy <appFolder>Deploy application to UPN server with smart packaging.
Features:
Options:
-f, --force - Force deployment without confirmationExample:
upncli deploy my-node-app
upncli deploy my-node-app --force
upncli logs <appFolder>View and stream application logs with syntax highlighting.
Features:
Options:
-f, --follow - Follow log output with auto-reconnect--filter <pattern> - Filter logs by patternExamples:
upncli logs my-app # View recent logs
upncli logs my-app --follow # Stream logs with auto-reconnect
upncli logs my-app --filter "error" # Filter for error messages
upncli project [action] [name]Manage multiple projects and configurations.
Actions:
list - List all configured projectssetup [name] - Setup a new project configurationstatus [name] - Show detailed project statusremove [name] - Remove project configurationExamples:
upncli project list # List all projects
upncli project setup admin-dashboard # Setup specific project
upncli project status my-app # Check project status
upncli project remove old-app # Remove project config
upncli ls - Alias for project listupncli status [name] - Alias for project statusConfiguration is stored in ~/.upncli/config.json:
{
"projects": {
"my-app": {
"serverUrl": "http://localhost:3888",
"bearerToken": "your-secret-token",
"blacklist": ["node_modules", ".git", "*.log", "dist"]
},
"admin-dashboard": {
"serverUrl": "https://admin.example.com",
"bearerToken": null,
"blacklist": ["node_modules", ".git"]
}
}
}
Each project can have:
Supports glob patterns for flexible exclusions:
node_modules - Exclude node_modules folder*.log - Exclude all log filesdist/** - Exclude entire dist directory.env* - Exclude environment filesThe CLI uses emoji indicators for clear visual feedback:
The CLI provides detailed error messages with helpful suggestions:
❌ Cannot connect to server: ECONNREFUSED
Suggestions:
ℹ️ Check if the server is running
ℹ️ Verify the server URL is correct
ℹ️ Check your network connection
When using --follow, the CLI automatically reconnects if the connection is lost:
upncli logs my-app --follow
# Automatically reconnects up to 5 times on disconnection
The CLI creates optimized deployment packages by:
Easily switch between different projects and environments:
upncli project list
📁 my-app (active) - http://localhost:3888
📁 admin-dashboard - https://admin.example.com
📁 api-server - http://api.local:3000
Authentication Errors
upncli setup my-app # Reconfigure bearer token
Connection Issues
upncli project status my-app # Test connectivity
Large Package Uploads
For detailed debugging, check the server logs or use verbose npm logging:
DEBUG=* upncli deploy my-app
commander - CLI frameworkinquirer - Interactive promptschalk - Terminal stylingarchiver - Zip creationaxios - HTTP requestsws - WebSocket for logsboxen - Text boxescli-progress - Progress barsMIT License - see LICENSE file for details.
FAQs
CLI tool for UPN (Updateable Node.js) container management
We found that upncli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.