Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@digitalocean/functions-deployer
Advanced tools
The the functions deployer for DigitalOcean
This repository contains an internal TypeScript library for deploying functions in DigitalOcean. It is used by the doctl serverless
deployer plugin and in remote builds.
The contents were jumpstarted by migrating the original Nimbella deployer from nimbella/nimbella-deployer
. The commit history (and version history) was preserved. Thus, the first version sourced from this repo is a new major version, 5.0.0.
There are three artifacts that are derived from this source:
nodejs
library for incorporation into other node-based tools. Currently, this is uploaded to a DigitalOcean space object store for later incorporation but it should eventually be published to npm
.doctl serverless
deployer-plugin. Currently, this is built from (1) in the separate repo digitalocean/doctl-sandbox-plugin
.dosls
. We do not install a complete doctl
into those images unless it is needed for another purpose.Artifacts (1) and (3) are built by the script internalRelease.sh
with no arguments. That script is driven by a GitHub action on every push to the main
branch. It only builds the artifacts if the current version (in package.json
) is not yet uploaded to the tools Space. After building the artifacts, it uploads them as well. So, new versions are "published" only on pushes to main
with a new version number.
The internalRelease.sh
script can also be run with a --test
flag, in which case is builds the artifacts unconditionally but does not upload them.
To test changes locally
npm install
npm run build
after which the deployer shell can be run as /path/to/repo/bin/run
. It is often convenient to make a symbolic link in your path pointing to that location (e.g. as dosls
). Then, you can test with
dosls deploy <projectDir>
dosls get-metadata <projectDir>
dosls watch <projectDir>
FAQs
The the functions deployer for DigitalOcean
The npm package @digitalocean/functions-deployer receives a total of 0 weekly downloads. As such, @digitalocean/functions-deployer popularity was classified as not popular.
We found that @digitalocean/functions-deployer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.