@nearform/fling 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +17 -3
- package/dist/cli.js +499 -62
- package/dist/cli.js.map +4 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -50,7 +50,7 @@ What you can fling:
|
|
|
50
50
|
- **A folder**, as is.
|
|
51
51
|
- **A single `.html`/`.htm` file**, served as the site's `index.html`.
|
|
52
52
|
- **A `.zip`**: extracted (paths that would escape the folder are refused), `__MACOSX/` and dotfiles
|
|
53
|
-
skipped, and a single top-level folder unwrapped.
|
|
53
|
+
skipped (dotfiles such as `.env` are listed), and a single top-level folder unwrapped.
|
|
54
54
|
- **Any other file** (`.pdf`, `.svg`, `.png`, `.md`…), served next to a small generated `index.html`
|
|
55
55
|
that shows it (images, PDF, video, audio) or links to it.
|
|
56
56
|
|
|
@@ -68,7 +68,21 @@ fling Found in Downloads: /Users/me/Downloads/Pitch-Deck.html
|
|
|
68
68
|
|
|
69
69
|
- Re-fling to update. Identical content is a no-op, and content you deployed before is restored
|
|
70
70
|
instantly without uploading.
|
|
71
|
-
-
|
|
71
|
+
- **Fling never publishes dotfiles, gitignored files, secret files (keys, certs, credentials) or
|
|
72
|
+
files that contain secrets; it stops and tells you which file and line.** There is no flag to
|
|
73
|
+
override this, and the server enforces it too.
|
|
74
|
+
- Dotfiles and dot-folders (`.env`, `.dev.vars`, `.npmrc`, `.git/`, `.well-known/`…) are skipped,
|
|
75
|
+
and the output lists what was skipped (`skipped` in `--json`).
|
|
76
|
+
- Gitignored files are skipped. When the folder you fling is itself gitignored (the usual
|
|
77
|
+
`dist/` or `build/`), only the `.gitignore` files inside it apply.
|
|
78
|
+
- Secret files by name (`*.pem`, `*.key`, `*.p12`, `*.pfx`, `*.jks`, `*.keystore`, `id_rsa`…,
|
|
79
|
+
`credentials(.json)`, `*service-account*.json`, `*.tfstate`, `*.tfvars`, `secrets.json/yml`,
|
|
80
|
+
`*.kdbx`, `wp-config.php`) stop the fling.
|
|
81
|
+
- Files that contain a secret (private keys, AWS / GitHub / npm / Slack / Stripe / OpenAI /
|
|
82
|
+
Anthropic / SendGrid / Azure keys and tokens, Google OAuth client secrets, database URLs with a
|
|
83
|
+
password) stop the fling with the file, line and kind of secret (never the secret itself).
|
|
84
|
+
Remove the secret (and rotate it if it was ever shared), or add the file to `.flingignore`.
|
|
85
|
+
- `node_modules` and anything listed in a `.flingignore` (gitignore syntax) are skipped too.
|
|
72
86
|
Symlinks pointing outside the folder are never followed.
|
|
73
87
|
- Limits are 25 MB per file, 100 MB per deploy and 5,000 files.
|
|
74
88
|
- Absolute asset paths (`/assets/x.js`) work because each site has its own subdomain.
|
|
@@ -157,7 +171,7 @@ The Fling plugin gives Claude a `fling` skill plus an MCP server (`fling mcp`),
|
|
|
157
171
|
/plugin install fling@fling
|
|
158
172
|
```
|
|
159
173
|
|
|
160
|
-
Log in once with `npx @nearform/fling login
|
|
174
|
+
Log in once with `fling login` (or `npx @nearform/fling login` if it is not installed). The MCP server reuses that login.
|
|
161
175
|
|
|
162
176
|
The MCP tools:
|
|
163
177
|
|