Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
gopkg.in/qml.v1
The introductory documentation as well as the detailed API documentation is available at gopkg.in/qml.v1.
Some relevant blog posts:
These introductory videos demonstrate the use of Go QML:
Please join the mailing list for following relevant development news and discussing project details.
To try the alpha release you'll need:
See below for more details about getting these requirements installed in different environments and operating systems.
After the requirements are satisfied, go get should work as usual:
go get gopkg.in/qml.v1
If you are using Ubuntu, the Ubuntu SDK will take care of the Qt dependencies:
$ sudo add-apt-repository ppa:ubuntu-sdk-team/ppa
$ sudo apt-get update
$ sudo apt-get install qtdeclarative5-dev qtbase5-private-dev qtdeclarative5-private-dev libqt5opengl5-dev qtdeclarative5-qtquick2-plugin
and Go >= 1.2 may be installed using godeb:
$ # Pick the right one for your system: 386 or amd64
$ ARCH=amd64
$ wget -q https://godeb.s3.amazonaws.com/godeb-$ARCH.tar.gz
$ tar xzvf godeb-$ARCH.tar.gz
godeb
$ sudo mv godeb /usr/local/bin
$ godeb install
$ go get gopkg.in/qml.v1
After following the installation instructions for Ubuntu Touch, run the following commands to get a working build environment inside the device:
$ adb shell
# cd /tmp
# wget https://github.com/go-qml/qml/raw/v1/cmd/ubuntu-touch/setup.sh
# /bin/bash setup.sh
# su - phablet
$
At the end of setup.sh, the phablet user will have GOPATH=$HOME in the environment, the qml package will be built, and the particle example will be built and run. For stopping it from the command line, run as the phablet user:
$ ubuntu-app-stop gopkg.in.qml.particle-example
for running it again:
$ ubuntu-app-launch gopkg.in.qml.particle-example
These commands depend on the following file, installed by setup.sh:
~/.local/share/applications/gopkg.in.qml.particle-example.desktop
On Mac OS X you'll need QT5. It's easiest to install with Homebrew, a third-party package management system for OS X.
Installation instructions for Homebrew are here:
http://brew.sh/
Then, install the qt5 and pkg-config packages:
$ brew install qt5 pkg-config
Then, force brew to "link" qt5 (this makes it available under /usr/local):
$ brew link --force qt5
And finally, fetch and install go-qml:
$ go get gopkg.in/qml.v1
On Windows you'll need the following:
Then, assuming Qt was installed under C:\Qt5.1.1\
, set up the following environment variables in the respective configuration:
CPATH += C:\Qt5.1.1\5.1.1\mingw48_32\include
LIBRARY_PATH += C:\Qt5.1.1\5.1.1\mingw48_32\lib
PATH += C:\Qt5.1.1\5.1.1\mingw48_32\bin
After reopening the shell for the environment changes to take effect, this should work:
go get gopkg.in/qml.v1
If your operating system does not offer these dependencies readily, you may still have success installing Go >= 1.2 and Qt 5.0.2 directly from the upstreams. Note that you'll likely have to adapt environment variables to reflect the custom installation path for these libraries. See the instructions above for examples.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.