
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@cdubz/ckeditor5-source-editing-codemirror
Advanced tools
CodeMirror 5 syntax highlighting in CKEditor 5 source editing mode.
Provides source editing formatting using CodeMirror 5.
This package was created by the ckeditor5-package-generator package.
To read about the CKEditor 5 framework, visit the CKEditor5 documentation.
Npm scripts are a convenient way to provide commands in a project. They are defined in the package.json
file and shared with other people contributing to the project. It ensures that developers use the same command with the same options (flags).
All the scripts can be executed by running npm run <script>
. Pre and post commands with matching names will be run for those as well.
The following scripts are available in the package.
start
Starts a HTTP server with the live-reload mechanism that allows previewing and testing plugins available in the package.
When the server has been started, the default browser will open the developer sample. This can be disabled by passing the --no-open
option to that command.
You can also define the language that will translate the created editor by specifying the --language [LANG]
option. It defaults to 'en'
.
Examples:
# Starts the server and open the browser.
npm run start
# Disable auto-opening the browser.
npm run start -- --no-open
# Create the editor with the interface in German.
npm run start -- --language=de
test
Allows executing unit tests for the package, specified in the tests/
directory. The command accepts the following modifiers:
--coverage
– to create the code coverage report,--watch
– to observe the source files (the command does not end after executing tests),--source-map
– to generate source maps of sources,--verbose
– to print additional webpack logs.Examples:
# Execute tests.
npm run test
# Generate code coverage report after each change in the sources.
npm run test -- --coverage --test
lint
Runs ESLint, which analyzes the code (all *.js
files) to quickly find problems.
Examples:
# Execute eslint.
npm run lint
stylelint
Similar to the lint
task, stylelint analyzes the CSS code (*.css
files in the theme/
directory) in the package.
Examples:
# Execute stylelint.
npm run stylelint
dll:build
Creates a DLL-compatible package build which can be loaded into an editor using DLL builds.
Examples:
# Build the DLL file that is ready to publish.
npm run dll:build
# Build the DLL file and listen to changes in its sources.
npm run dll:build -- --watch
dll:serve
Creates a simple HTTP server (without the live-reload mechanism) that allows verifying whether the DLL build of the package is compatible with the CKEditor 5 DLL builds.
Examples:
# Starts the HTTP server and opens the browser.
npm run dll:serve
translations:collect
Collects translation messages (arguments of the t()
function) and context files, then validates whether the provided values do not interfere with the values specified in the @ckeditor/ckeditor5-core
package.
The task may end with an error if one of the following conditions is met:
Unused context
error – entries specified in the lang/contexts.json
file are not used in source files. They should be removed.Context is duplicated for the id
error – some of the entries are duplicated. Consider removing them from the lang/contexts.json
file, or rewrite them.Context for the message id is missing
error – entries specified in source files are not described in the lang/contexts.json
file. They should be added.Examples:
npm run translations:collect
translations:download
Download translations from the Transifex server. Depending on users' activity in the project, it creates translations files used for building the editor.
The task requires passing the URL to Transifex API. Usually, it matches the following format: https://www.transifex.com/api/2/project/[PROJECT_SLUG]
.
To avoid passing the --transifex
option every time when calls the command, you can store it in package.json
, next to the ckeditor5-package-tools translations:download
command.
Examples:
npm run translations:download -- --transifex [API URL]
translations:upload
Uploads translation messages onto the Transifex server. It allows for the creation of translations into other languages by users using the Transifex platform.
The task requires passing the URL to the Transifex API. Usually, it matches the following format: https://www.transifex.com/api/2/project/[PROJECT_SLUG]
.
To avoid passing the --transifex
option every time when you call the command, you can store it in package.json
, next to the ckeditor5-package-tools translations:upload
command.
Examples:
npm run translations:upload -- --transifex [API URL]
Licensed under the terms of GNU General Public License Version 2 or later.
FAQs
CodeMirror 5 syntax highlighting in CKEditor 5 source editing mode.
We found that @cdubz/ckeditor5-source-editing-codemirror demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.