Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@a-cloud-guru/serverless-import-tags
Advanced tools
Facilitate importing tags defined outside the template, without having to overwrite `stackTags` field, for reusability
Serverless stackTags
will tag most resources in the template(*) , and supports importing from an external file. Nonetheless, it doesn't support importing from more than one file, therefore you can't specify global tags in tandem with stack tags and resource tags.
. This plugin will solve that issue by merging the global tags file into the stackTags prior to the template being generated.
# Via yarn
$ yarn add @a-cloud-guru/serverless-import-tags
# Via npm
$ npm install @a-cloud-guru/serverless-import-tags
custom:
globalTags: ${file(./team_tags.yml)}
plugins:
- @a-cloud-guru/serverless-import-tags
In order to support best practices in Tagging guidelines, you can reuse compliance tag lines from a single file. This
yaml template especified with the custom parameter globalTags
must be an array of Key
:Value
tags, e.g.:
"info:owner": an_awesome_guru
alliance: operations
cc_feature: ${opt:stage,self:provider.stage}-zone-labs
cc_company_usage: acg
FAQs
Facilitate importing tags defined outside the template, without having to overwrite `stackTags` field, for reusability
We found that @a-cloud-guru/serverless-import-tags demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 85 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.