Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@alicloud/fun
Advanced tools
(have)Fun with Serverless
Fun 是一个用于支持 Serverless 应用部署的工具,能帮助您便捷地管理函数计算、API 网关、日志服务等资源。它通过一个资源配置文件(template.yml),协助您进行开发、构建、部署操作。
如果你想使用旧版本的语法,请参考.
Fun 作为一个命令行工具,内置了多个子命令,比如 config、local、deploy 等。
其中,config 子命令可以用来配置 fun,local 子命令可以用来本地运行调试函数,deploy 子命令可以将资源发布到线上。
为了让您尽快上手,我们准备了一系列教程:
安装教程:介绍了如何在 Mac、Linux 或者 Windows 上安装 Fun。
快速开始:通过一个简单的示例介绍了 Fun 的基本用法。
Fun 规范文档: 详细介绍了 Fun 规范文档的细节。
Fun 基本功能介绍:
深度集成 Fun 的工具:
系列文章:
fun init [repo]
的方式快速初始化一个项目。
常见问题与解答: 使用 Fun 时的常见问题与解答。
如您在使用中遇到问题,可以在这里反馈 https://github.com/aliyun/fun/issues
The MIT License
FAQs
(have)Fun with Serverless
The npm package @alicloud/fun receives a total of 112 weekly downloads. As such, @alicloud/fun popularity was classified as not popular.
We found that @alicloud/fun demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.