Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@bluealba/carryall
Advanced tools
A easy way to keep your environments in sync
The main intent of Carryall is to ease the deployment tasks performend into a single server environment (although technically speaking it can be extended to suppert any mechanism of provisioning).
Caryall relies on a single source of truth to describe a what is expected from an environment.
Yet, carryall is only a glorified script. Don't expect it to cook breakfast for you!
We recommend to install carryall globally in each server to be provisioned.
$ npm instal --global carryall
You will need to create a configuration file. The default name is carryall.json
. It should look something like this:
{
"environment": "<environment name>",
"descriptor": {
"repository": "<your git repo url, without protocol and username please>,
"username": "<your username>",
"password": "<your password>"
"branch": "<the branch to checkout>",
},
"reporter": {
"slack": {
"token": "<your bot token secret>",
"channel": "<the channel to push notifications>"
}
},
"workdir": ".carryall"
}
Execute the following command to perfomr an deploy
$ carryall deploy
And follow the instruction on screen. You can also run carryall help
to see a list of available commands
.
FAQs
An easy way to keep your environments in sync
We found that @bluealba/carryall demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.