
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
notis is a Mac OSX utility that allows you to display a standard OSX toast message notification at the completion of a long-running command with the option to emit an audio signal.
Install the Ruby gem with the following command:
gem install notis
You can run the command that is to be tracked as an argument to notis or you can pipe the standard output from the command to notis. The way that you run it influences the level of detail that you receive in the notification text.
Use the command to be tracked as an argument to notis and enclose it in quotes if it includes spaces or special shell characters. For example, if you are running the command longrunner bigfile.baf
:
notis "longrunner bigfile.baf"
When you run notis with this syntax, you will receive a notification that identifies the completed command with up to 20 characters of the original command string.
You can also use notis by piping the standard output stream of another command to the notis standard input stream. Assuming that you are running the command longrunner bigfile.baf
:
longrunner bigfile.baf | notis
This utility provides the option to mute the standard output from the original command and to emit an audio signal that the command completed along with the notification toast message. These options can combined.
-m, --mute
)notis -m "longrunner bigfile.baf"
or
longrunner bigfile.baf | notis -m
-b, --bell
)notis -b "longrunner bigfile.baf"
or
longrunner bigfile.baf | notis -b
FAQs
Unknown package
We found that notis demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.