New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

@code4rena/skeleton

Package Overview
Dependencies
Maintainers
13
Versions
21
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@code4rena/skeleton

```shell > npm i -D --save-exact @code4rena/skeleton > npm pkg set skeleton.module=@code4rena/skeleton > npx code-skeleton apply ```

1.2.1
npm
Version published
Weekly downloads
98
58.06%
Maintainers
13
Weekly downloads
 
Created
Source

a code-skeleton config for code4rena usage

> npm i -D --save-exact @code4rena/skeleton
> npm pkg set skeleton.module=@code4rena/skeleton
> npx code-skeleton apply

Configuration & Usage

CI

In your projects package.json you can set custom CI variables to extend the default workflow. The following configuration will add a Postgres service to the test job, as well as inject the DOTENV_KEY environment variables for dotenv vault usage.

  "skeleton": {
    "variables": {
      "ci": {
        "postgres": true,
        "env_vault": true
      }
    }
  },
Postgres Container

When enabled, you will need to set the following repository variables in your github repos action variables ({repo}/settings/variables/actions):

  • POSTGRES_DB
  • POSTGRES_PASSWORD
  • POSTGRES_PORT
  • POSTGRES_USER
Dotenv Vault

When enabled, in addition to a commited .env.vault file, you will need to set the DOTENV_KEY environment secret for the desired .env file from your .env.keys file. Set this as a repository secret at {repo}/settings/secrets/actions on github.

Update your skeleton version

Check the latest version Run: npm i -D --save-exact @code4rena/skeleton@[LATEST_VERSION] Then: npx code-skeleton apply

Potential issue with shebang

If you see a Permission Denied issue with shebang, you can run chmod +x ./scripts/update-shebang.ts

FAQs

Package last updated on 12 Jan 2024

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts