Security News
PyPI’s New Archival Feature Closes a Major Security Gap
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
@code-dot-org/blockly-core
Advanced tools
Code.org fork of google/blockly for use within the Code Studio learning environment.
This is a fork of Blockly, an open source visual programming environment.
Major additions and changes in this fork:
Blockly.editBlocks
is setblockly.js
into a prototype class BlockSpaceEditor
which can be instantiated multiple times on the same pageWorkspace
to BlockSpace
to disambiguate from higher-level BlockSpaceEditor
cd blockly-core
npm install
./deploy.sh
There is a playground manual testing page at tests/playground.html, which requires no build step or server running.
open tests/playground.html
This is the most typical use case for code-dot-org fork development.
Apps (aka Blockly apps) is a set of blockly apps built on top of blockly-core. Follow the building with core instructions in that repository to build blockly-core into apps.
There are a set of utility and integration tests included in tests/blockly_test.html
, and a playground manual testing page at tests/playground.html
.
After adding any new files, you will need to run ./update_test_dependencies.sh
to update the test dependency map, which caches file dependencies so edits can be tested and played with without any re-build time.
There are three ways the test suites can be run:
./test.sh
will run the tests in phantomjsopen tests/blockly_test.html
./deploy.sh
will also run ./test.sh
at the end of its full rebuild.Blockly apps contains many tests that target features of blockly-core in the context of the code.org curriculum apps.
Additionally, Dashboard's UI tests cover certain features of blockly-core through Cucumber / Selenium scenarios.
FAQs
Code.org fork of google/blockly for use within the Code Studio learning environment.
We found that @code-dot-org/blockly-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now allows maintainers to archive projects, improving security and helping users make informed decisions about their dependencies.
Research
Security News
Malicious npm package postcss-optimizer delivers BeaverTail malware, targeting developer systems; similarities to past campaigns suggest a North Korean connection.
Security News
CISA's KEV data is now on GitHub, offering easier access, API integration, commit history tracking, and automated updates for security teams and researchers.