Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@byu-oit/wabs-starter
Advanced tools
This is a terminal application that assists in the defining and creating of full stack single page web applications (SPA) that uses WABS. The application can:
Build a new SPA from a template.
Manage the WSO2 credentials for SPAs defined on the machine.
Test WSO2 credentials.
npm install -g byu-oit/wabs-starter
If your SPA will not use WSO2 you can skip to the Build section.
WSO2 requires a consumer key and consumer secret (also known as a client id and client secret respectively). The WABS middleware will attempt to read this information from multiple locations automatically, in this order:
From command line arguments that are used to start the server.
From environment variables.
From the file located at $HOME/.wabs/config.json
.
From the AWS parameter store.
After you've built an SPA from the starter you can run your application using this command to specify the consumer key, consumer secret, and encrypt secret via command line arguments:
node serve -c <consumer-key> -s <consumer-secret> -e <encrypt secret>
Using the starter is a three step process.
Build the SPA from the starter template. This is easily done using the terminal application.
Navigate to the SPA directory.
Run the command: npm start
To start the terminal application, open a terminal and type the following command: wabs
.
The keyboard can be used to navigate the terminal application. See the keyboard help at the bottom.
The terminal application may support mouse usage, depending on what terminal you are using.
The left side has a list of all full-stack apps currently defined on the machine.
Top left is a button to define a new full-stack app.
The middle column is the full-stack app menu. Select an item to see details and list of controls in the right column.
The above usage is the recommended usage, but if you'd like to do things by hand it's pretty straight forward too.
Credentials are stored in a file located in your home directory under .wabs/config.json
. If you want to manually manage the credentials file then you need to modify this file. If you have not used the wabs
command and saved an app then this file will not exist yet but it can be created either manually or through the wabs
terminal application.
The credentials file is structured like this:
{
"my-first-app": {
"consumerKey": "asdf1234",
"consumerSecret": "hjkl7890",
"encryptSecret": "a2*r5jLDOx0"
}
}
Download or clone the repository at https://github.com/byu-oit/wabs-starter
Delete everything except the starter
directory.
Do a find and replace for each of the following for the entire starter
directory.
{{name}}
with the name of your app as defined in the $HOME/.wabs/config.json
file.Rename the starter
directory to whatever you want.
FAQs
A starter template for building single page applications using Vue, Vue Router, and Vuex in conjunction with Gulp and Webpack.
The npm package @byu-oit/wabs-starter receives a total of 16 weekly downloads. As such, @byu-oit/wabs-starter popularity was classified as not popular.
We found that @byu-oit/wabs-starter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.