Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@bafsllc/serverless-import-config-plugin
Advanced tools
Adds possibility to import YAML files in serverless.yaml config file
Split your serverless.yaml
config file into smaller modules and import them.
By using this plugin you can build your serverless config from smaller parts separated by functionalities. Imported config is merged, so all keys are supported and lists are concatenated (without duplicates).
Works on importing yaml files by path or node module, especially useful in multi-package repositories.
Install with npm:
npm install --save-dev serverless-import-config-plugin
And then add the plugin to your serverless.yml
file:
plugins:
- serverless-import-config-plugin
Specify config files to import in custom.import
list:
custom:
import:
- ./path/to/serverless.yml # path to YAML file with serverless config
- ./path/to/dir # directory where serverless.yml can be find
- module-name # node module where serverless.yml can be find
- '@myproject/users-api' # monorepo package with serverless.yml config file
- module-name/custom-serverless.yml # path to custom config file of a node module
custom.import
can be also a string, when only one file needs to be imported:
custom:
import: '@myproject/users-api'
All function handler paths are automatically prefixed by the imported config directory.
functions:
postOrder:
handler: functions/postOrder.handler # relative to the imported config
For other fields you need to use ${dirname}
variable manually.
${dirname}
points to a directory of imported config file.
custom:
webpack:
webpackConfig: ${dirname}/webpack.config.js
In case you want to customize imported config in more dynamic way, provide it as javascript file (serverless.js
).
module.exports = ({ name, schema }) => ({
provider: {
iamRoleStatements: [
// ...
],
},
// ...
})
You can pass arguments to the imported file using module
and inputs
fields:
custom:
import:
- module: '@myproject/aws-dynamodb' # can be also a path to js file
inputs:
name: custom-table
schema:
# ...
FAQs
Adds possibility to import YAML files in serverless.yaml config file
We found that @bafsllc/serverless-import-config-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.