Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/sillsdev/FwLocalizations
Localizations for FieldWorks
The authoritative list of supported languages is maintained at https://crowdin.com/project/fieldworks/settings#translations. To add a new language, you will also need to update the following locations in the FieldWorks repository (https://github.com/sillsdev/fieldworks):
Build/Installer.targets (CopyFilesToInstall, HarvestAllL10ns)
FLExInstaller/CustomComponents.wxi (multiple places)
FLExInstaller/CustomFeatures.wxi
¿Others?
<LocaleDirs Include="$([System.IO.Directory]::GetDirectories("$(L10nsDirectory)"))"/>
(these do not need to be updated)Linux localization package specifications need regenerated for new localizations to be shipped:
Checkout the latest localization files.
cd ~/fwrepo/fw/Localizations
git fetch
git checkout origin/develop
Generate l10n package specifications.
cd ~/fwrepo/debian
git fetch
git checkout origin/release/9.0 # Or similar release branch.
./generate-l10n-control-entries ../fw
Merge in changes, and push the result.
meld control-l10n control
Removing or adding strings
If you remove strings from FieldWorks you will need to get your system ready to run the uploadUpdatesForTranslation
build target.
LibraryDevelopment.properties
file.CROWDIN_API_KEY
to the version 1 Api key for the FieldWorks crowdin project.build /t:uploadUpdatesForTranslation
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.