
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
This is a simple process managing command line tool
This tools keeps the information of the processes it manages in a json file created at it's installation location
pip install pmflow
Windows Installation: After installing pmflow with pip on windows make sure the path where the pm script is in the environment variable.
Use the below command in cmd to see the installation location of the pmflow
pip show pmflow
It should be something like C:\your\installation\location\Python\Python3<version>\site-packages
. In Python3<version>
directory there should be a directory
named scripts
. Make sure the path C:\your\installation\location\Python\Python3<version>\scripts
is a environment variable and you should be good to go.
create: Creates a new process
Required arguments:
Optional arguments:
Note: A child process must have a group name and the group must have a parent process.
Example:
pm create "<command>"
or
pm create "<command>" -n "<process name>" -g "<group name>" -r "child"
ls: List all managed processes
Optional arguments:
pm ls
pm ls -j
pm ls -g <group_name>
pm ls -j -g <group_name>
pm ls -r
kill: Kill process, kills the process and also removes it from the json file.
Optional arguments:
Note: Other than -c only one options can be used at a time. -c flag must be used with -g
Example:
pm kill <PID>
pm kill -g <group_name>
pm kill -g <group_name> -c
pm kill -a
Recreate all process managed by the tool:
pm recreate
Pause a process
pm pause <PID>
respawn all paused process
pm respawn
FAQs
Manages processes
We found that pmflow demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.