
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@allianceblock/fundrs-library
Advanced tools
after having downloaded the repository, these are the steps you have to follow to make the repository work for the first time:
after having downloaded the repository, these are the steps you have to follow to make the repository work for the first time:
-npm i -D @babel/cli @babel/core @babel/preset-env @babel/preset-react rollup @rollup/plugin-babel rollup-plugin-delete rollup-plugin-peer-deps-external npm-run-all.
-npm run i-all.
-npm update && npm run build.
-npm run dev.
The commands will be executed from the ROOT folder of the repository.
npm run i-all
this script installing all the dependencies, for both folders, library and playground (optional if the dependencies of the library or the playground have not yet been installed).
npm update && npm run build
... these commands work to update and create the build (the ./dist folder) of the library, which is necessary to test it in the playground. (The components will not work or display unless you update the ./dist folder with this command).
npm run dev
... this command is responsible for raising the code from the playground and the library, so the components can be edited (within the library) and automatically updated in the front (the playground). This command is the most useful to develop, because it updates the .dist folder when it is being developed,so I suggest you use more than all of this.
--The components in the library are different than the components in the playground, they should not be confused.
--The components in the playground must be built with proptypes so that they are able to render a correct documentation.
npm run start-playground
this command will only raise the "playground" to test the components (this command will not update the library when any component is changed there).
npm run start-library
this command will only run the "documentation". to see the documentation running go to localhost:6060
FAQs
after having downloaded the repository, these are the steps you have to follow to make the repository work for the first time:
The npm package @allianceblock/fundrs-library receives a total of 0 weekly downloads. As such, @allianceblock/fundrs-library popularity was classified as not popular.
We found that @allianceblock/fundrs-library demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.