
Security News
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.
@10up/scripts
Advanced tools
A collection of bundled scripts for 10up development.
npm install --save-dev @10up/scripts
10up-scripts build
Builds CSS and JavaScript files. This uses the 10up configuration for Webpack.
10up-scripts start
Builds CSS and JavaScript and watches files for changes.
10up-scripts format-js
Fixes JavaScript formatting issues via ESLint with 10up configuration.
10up-scripts lint-js
Runs ESLint with 10up configuration
10up-scripts lint-style
Runs Stylelint with 10up configuration.
10up-scripts test-unit-jest
Runs Jest on current project.
10up-scripts check-engines
Verify the Node and npm satisfy minimum package.json versions.
Project is a fork of wp-scripts
Active: 10up is actively working on this, and we expect to continue work for the foreseeable future including keeping tested up to the most recent version of WordPress. Bug reports, feature requests, questions, and pull requests are welcome.
FAQs
Collection of reusable scripts for 10up development.
The npm package @10up/scripts receives a total of 31 weekly downloads. As such, @10up/scripts popularity was classified as not popular.
We found that @10up/scripts demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.

Security News
/Research
Socket found a Rust typosquat (finch-rust) that loads sha-rust to steal credentials, using impersonation and an unpinned dependency to auto-deliver updates.

Research
/Security Fundamentals
A pair of typosquatted Go packages posing as Google’s UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting developer and CI data at risk.