
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
@brisk-docs/website
Advanced tools
Brisk Docs is a package oriented documentation system that lets you write useful, interactive docs alongside your code. It is aimed at documenting packages in a mono-repo
Start by installing Brisk Docs in your project
npm install @brisk-docs/website
To start your docs website locally:
npm run brisk dev
To produce a static build of the website that can be statically hosted:
npm run brisk build && npm run brisk export
Brisk Docs by default uses file and folder name conventions to find docs in your codebase and display them in a organised way.
For guides and docs relating to your project or repository as a whole, Brisk Docs will display any Markdown or MDX files placed in the /docs
folder at the top of your repository. This is a good place to put user guides, tutorials, contributor guidelines etc.
Brisk Docs has first class support for multi-package repos. All packages found in the /packages
directory of your project will have documentation generated automatically.
Read more about package documentation in our package documentation guide.
MDX means that we parse markdown a little differently, and treat jsx blocks as react components.
This means that you can write:
# Just a regular markdown package
import MyComponent from './src/myComponent'
<MyComponent>I could not be expressed just with markdown<.MyComponent>
Just some more _regular_ markdown here.
In addition to being able to render any markdown, brisk provides two components that can be used on any page without being imported.
They are <Props />
and <FileViewer />
- these are exports of pretty-proptypes and file-viewer
FAQs
The Brisk website documenter
The npm package @brisk-docs/website receives a total of 0 weekly downloads. As such, @brisk-docs/website popularity was classified as not popular.
We found that @brisk-docs/website demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.