
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@atomist/clj-editors
Advanced tools
editor functions that use rewrite-clj and other important things from the clojurescript ecosystem
We build a node module @atomist/clj-editors here. This allows us to construct clojure editors
using rewrite-cljs. A Node.js application, like an Atomist automation client, can now easily
package clojure editing functions into a typescript application.
This also has a simple command line to manage the clojure-sdm credentials. Install this module with:
npm install @atomist/clj-editors@0.3.8 -g
then
sdm-vault --help
to manage maps encrypted with goog.crypt.Aes keys.
Add the dependency to your application's package.json file.
{
"dependencies": {
...
"@atomist/clj-editors": "^0.3.8",
...
},
...
}
This module works with npm link so we can co-develop these editors alongside the sdm-pack-clojure.
These editors are pretty easy to unit test, and testing from a Node.js repl works quite well!
npm run compile
npm run repl
This will give you a socket repl running on port 7777, so you can connect emacs or intellij and evaluate the cljs forms
on the fly. It's a pretty good workflow, and contains clojure.test (although it's in cljs.test here). I haven't
gotten it working with nrepl so it's not quite as smooth as working with a Java repl but it can do the main things:
cljs.repl, whether they are compiled to .js.js expressions are sent to a node.js process running alongside the cljs.repl(deftest) forms work great so you can code and evaluate unit tests using our standard workflow.Run cljs.test unit tests using npm:
npm run test
It's just normal npm publish for the rest.
This project also has a simple command line to manipulate vault.txt files.
FAQs
editor functions that use rewrite-clj and other important things from the clojurescript ecosystem
We found that @atomist/clj-editors demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.