
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
texproject
Advanced tools
TexPRoject is a command-line LaTeX template and project manager written in Python.
On UNIX-like systems, typically one can install the command-line tool with the following commands:
pip install texproject
git clone https://github.com/alexrutar/texproject-templates ~/.local/share/texproject
Texproject complies with the XDG Base Directory Specification; replace ~/.local/share or ~/.config with your configured directories.
Currently, there is no installation script or package manager support, but I hope to implement this eventually.
To configure Texproject, you can generate a global configuration file in the directory ~/.config/texproject/ by running
mkdir -p ~/.config/texproject
tpr util show-config > ~/.config/texproject/config.toml
Texproject is installed under the command line tool tpr.
To create a new project, create an empty directory, change into it, and run
tpr init <template>
This command will create a new project using the template with name <template> in the current directory.
To specify a different directory, use the -C <path> flag.
This creates the files main.tex (for primary document contents) and project-macros.sty (for project-specific macros).
To get a list of available templates, run
tpr list template
If you are currently in a project file, run
tpr archive <output.zip>
to create compressed source files for your project in the same directory.
If you want to edit parameters of your document (such as citation files, additional macro sets, or other features), run
tpr template edit
to open the project template file in your $EDITOR.
When the file is closed, the project is automatically updated.
Note that this will not overwrite existing linked files.
If you want to overwrite existing files, the tpr import function may be useful.
For instance, to update the tikz macro file, you would run
tpr import --macro tikz
This subcommand can also be used to import files not in the template repository.
If you have a citation file /path/to/citation.bib, run
tpr import --citation-path path/to/new/file.bib
You can then include this file by adding file to the citations section of the project configuration file.
You can also programmatically add new imports as well: in the above example, run
tpr template add --macro tikz
Read about more features by running
tpr --help
tpr <subcommand> --help
A number of subcommands used by Texproject use the latexmk program for automatic compilation.
This is useful in order to programmatically verify compilation, as well as automatic creation of .pdf or .bbl files from source files when exporting.
For example, to create a compressed export with includes a .pdf of the current build, run
tpr archive output.zip --mode build
Run tpr validate --help or tpr archive --help for more information on some subcommands which use automatic compilation.
Texproject also has an automated tool that is useful for setting up a remote a repository on GitHub with convenient continuous integration features. In order to use these features, git, along with the GitHub CLI, must be installed and properly authenticated.
WARNING: The commands in this section will create and modify repositories and continuous integration on your GitHub account.
In a new project without an initialized .git repo, run the command
tpr git init
to begin an interactive session to set up a new git repo with a remote on GitHub. This command does the following:
API_TOKEN_GITHUB, which is used by some of the CI features.In order to see the commands which will be run without executing them, use tpr -n git init.
This GitHub repository is initialized with a custom action (see .github/workflows/build.yaml) which automatically creates GitHub releases for tagged versions on your project.
For example, suppose you make some changes to your .tex file and commit them to your repository:
echo "% a comment" >> main.tex
git commit --a m "A nice commit message"
Then, create a tag and push the commit along with the tag:
git tag v1.0 -m "First release!"
git push --follow-tags
Now, after the action has finished running, the compiled files will be visible at the URL https://github.com/username/reponame/releases.
Here, we demonstrate the construction of a basic project.
First, create a project with the name example using the empty template, and change into the directory.
mkdir example && cd example
tpr init empty
The relevant project files in this directory are main.tex and project-macros.sty.
The file main.tex file is the main document file which you can edit to produce your document.
The project-macros.sty file is an empty package in which you can input custom project-dependent preamble.
These packages are always loaded after any specified project files.
Suppose we want to include the macro set general with our project: to do this, run
tpr template add --macro general
If you want to share this project with someone else, simply run
tpr archive output.zip
which will generate the file output.zip within the project directory.
This zipfile contains all the source files required to compile the document.
FAQs
An automatic LaTeX project manager.
We found that texproject demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.