
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
@coveo/atomic-component-health-check
Advanced tools
This is a package that checks if your Atomic custom components meet all the conditions required in order to be published. It is designed to help you ensure that your component is healthy and easily sharable with other users.
You can install Health Check using npm:
npm install health-check --save-dev
Once installed, you can use Health Check by running the bin file (atomic-meta-check
) available in the node modules:
It is meant to be used as a prepublishOnly
script.
You can add it to your package.json:
...
"scripts": {
"prepublishOnly": "npm run build && atomic-meta-check",
},
...
"devDependencies": {
"@coveo/atomic-component-health-check": "latest",
},
...
If you find a bug or have a feature request, please create an issue or submit a pull request.
FAQs
A Health checker for custom Atomic component
The npm package @coveo/atomic-component-health-check receives a total of 1,348 weekly downloads. As such, @coveo/atomic-component-health-check popularity was classified as popular.
We found that @coveo/atomic-component-health-check demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 15 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.