Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@department-of-veterans-affairs/generator-vets-website
Advanced tools
Generate a React app for vets-website
Yeoman generator for applications on VA.gov
The generator is already installed as a devDependency
of vets-website
.
From vets-website
, run npm run new:app
.
Follow the instructions on screen.
For more details on answering the prompts, the following documentation might be helpful.
These resources are also provided by the generator at startup.
There are two generators: one for general (non-form) apps and one for form apps.
For specifics on writing a generator, refer to the official Yeoman documentation.
Make your modified generator available as a global module.
From the root of this repo (generator-vets-website
):
# Create a symlink in your global node_modules to this module.
npm link
Run your modified generator in your local vets-website
.
From the root of vets-website
:
# Point vets-website's local generator to your newly linked global module.
npm link @department-of-veterans-affairs/generator-vets-website
# Start up Yeoman.
npx yo
# Choose to run generator-vets-website in the Yeoman prompt.
Due to the link, any further changes to the generator will automatically be included when you run it within your local vets-website
repo.
When you're done testing your changes, clean up the links:
# From the root of vets-website:
npm unlink --no-save @department-of-veterans-affairs/generator-vets-website
# From the root of generator-vets-website:
npm unlink
FAQs
Generate a React app for vets-website
The npm package @department-of-veterans-affairs/generator-vets-website receives a total of 1,747 weekly downloads. As such, @department-of-veterans-affairs/generator-vets-website popularity was classified as popular.
We found that @department-of-veterans-affairs/generator-vets-website demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.