
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@atlaspack/cli
Advanced tools
Atlaspack is the frontend bundler used to build Atlassian products, written in JavaScript and Rust by core contributors of Parcel. It has been engineered to bundle exceptionally large applications and serve the needs of our products. While you are welcome to try out atlaspack, we do not plan to support use-cases outside of Atlassian at this time. Therefore, we advise against using atlaspack in production environments.
[!NOTE] This repository is currently a direct fork of Parcel that will diverge over time to better handle the needs and scale required by Atlassian
Special thanks to Devon for his invaluable contributions, guidance, and wisdom in shaping the foundations of the Atlassian bundler!
npm install --save-dev @atlaspack/cli
atlaspack src/index.html
src/index.html
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<title>Atlaspack App</title>
<script type="module" src="app.js"></script>
</head>
<body>
<h1>Hello, World!</h1>
</body>
</html>
src/app.js
console.log('Hello, World!');
Check the docs website or the docs folder.
yarn test
Please see CONTRIBUTING.md for details.
Copyright (c) 2024 Atlassian US., Inc. Apache 2.0 licensed, see LICENSE file.
Prior to 096a255d54474b58b80c659274c4604ed67c9039
contributions were released
under the MIT license, see OLD_LICENSE.
FAQs
Blazing fast, zero configuration web application bundler
The npm package @atlaspack/cli receives a total of 854 weekly downloads. As such, @atlaspack/cli popularity was classified as not popular.
We found that @atlaspack/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.