Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/vmware-tanzu/tanzu-framework/tkg
This project was generated with Angular CLI version 8.3.20.
Node version 10.x.x
node --version
to check which version you haveNode version can be set and managed by using NVM (Node Version Manager):
brew install nvm
nvm install 10
(or nvm use 10
to temporarily set node version)To build the UI locally via Make, run make ui-build
which will install node modules and compile UI assets into 'dist' folder.
If an alternate NPM registry is required to obtain the node dependencies, it should be configured either
npm config set registry <register-url>
, orIf running UI locally without executing Makefile script, execute npm install
from tkg-cli/web folder prior to starting or compiling UI.
Prerequisite - node modules have been install via make ui-build
or npm install
in '/tkg-cli/web' directory
Run npm run start
from /tkg-cli/web folder. Navigate to http://localhost:4200/
in a browser. The app will automatically reload if you change any of the source files.
Running UI Mock API server
to make mock API endpoints available when developing on local machine.Run npm run start
from /tkg-cli/web/node-server folder. Node.js will serve mock API endpoints on http://localhost:8008
.
See Prerequisites for Building and Running UI on Local Machine
To serve the tkg ui, under tkg-cli repo, run: make tkg
Then run tkg init --infrastructure=<aws/vsphere> --ui
, the command just starts the UI server and it will not trigger any tkg init steps.
The ui will be served at http://127.0.0.1:8080
Prerequisite - node modules have been install via make ui-build
or npm install
in '/tkg-cli/web' directory
Run npm run build:prod
to build the project. The build artifacts will be stored in the '/dist' directory.
Run npm run test
to execute the unit tests via Karma.
Run make pull-ci
prior to creating a pull request to run all github CI tests (UI and Golang tests).
Run ng e2e
to execute the end-to-end tests via Protractor.
To get more help on the Angular CLI use ng help
or go check out the Angular CLI README.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.