
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
> **IMPORTANT NOTICE:** The API is going to be shut down and `urcli` will become inactive in the following months. You should no longer use `urcli` alongside any official Udacity mentor dashboard features. The only commands that are currently recommended
IMPORTANT NOTICE: The API is going to be shut down and
urcliwill become inactive in the following months. You should no longer useurclialongside any official Udacity mentor dashboard features. The only commands that are currently recommended arerevenueandnotify.
urcli is a Command Line Interface for configuring and running API calls against the Udacity Reviews API. You can find the API documentation here: https://review.udacity.com/api-doc/index.html.
notify CommandWhile the reviews developer team works on implementing all of the functionality in the dashboard I've added a new command that let's urcli show Desktop notifications when submissions are assigned:
urcli notify
This command only hits the /me/assigned endpoint, so it doesn't touch the submission request or interact with the queue in any way. That being said, Udacity has been clear in saying that it doesn't support 3rd party tools anymore, so this new feature will not be supported by anyone. It's one of those take-it-or-leave-it things :smile:. There is no one to complain to if it breaks your computer. With that also being said, it really should be safe to use it while we wait for an official notification feature.
npm install -g urcli.
urcli setup. When prompted, paste in the token you just got and then go through the rest of the setup.urcli assign proceeded by valid project ids for projects you are certified for. Ex:
urcli assign 145, places you in the queue for project 145.urcli assign 134 145 46, places you in the queues for project 145, 134 and 46.urcli assign all, places you in the queue for every project you are certified for.ESC to stop the currently running instance (If you have urcli running).npm i -g urcli.urcli setup.urcli assign all.If you don't know how to use Node and npm, you can use the executables instead. See the wiki entry for more.
Documentation can be found in the Wiki. Commands:
The setup command creates a configuration folder in your home folder. You find the configuration file here ~/.urcli/config.json.
Got a question or an idea? Found a bug? Check out our contributing guidelines for ways to offer feedback and contribute.
For very minor changes:
git checkout -b my-new-thing)git commit -am 'commit-message')git push origin my-new-thing)For new features you need to do everything above, but before you write any code you should first read the contributing guidelines and then open an issue explaining what you have in mind. Making sure your feature fits with the direction the project is going can save you a lot of otherwise wasted effort.
MIT © Mikkel Trolle Larsen.
FAQs
> **IMPORTANT NOTICE:** The API is going to be shut down and `urcli` will become inactive in the following months. You should no longer use `urcli` alongside any official Udacity mentor dashboard features. The only commands that are currently recommended
The npm package urcli receives a total of 3 weekly downloads. As such, urcli popularity was classified as not popular.
We found that urcli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.