
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@dmattia/pulumi
Advanced tools
The Pulumi Node.js SDK lets you write cloud programs in JavaScript.
Using npm:
$ npm install --save @pulumi/pulumi
Using yarn:
$ yarn add @pulumi/pulumi
This SDK is meant for use with the Pulumi CLI. Please visit pulumi.com for installation instructions.
For anybody who wants to build from source, here is how you do it.
This SDK uses Node.js and we support any of the Current, Active and Maintenance LTS versions. We support both NPM and Yarn for package management.
At the moment, we only support building on macOS and Linux, where standard GNU tools like make
are available.
To build the SDK, simply run make
from the root directory (where this README
lives, at sdk/nodejs/
from the repo's
root). This will build the code, run tests, and install the package and its supporting artifacts.
At the moment, for local development, we install everything into /opt/pulumi
. You will want this on your $PATH
.
The tests will verify that everything works, but feel free to try running pulumi preview
and/or pulumi up
from
the examples/minimal/
directory. Remember to run tsc
first, since pulumi
expects JavaScript, not TypeScript.
3.14.0 (2021-10-06)
[cli] - Differentiate in-progress actions by bolding output. #7918
[CLI] Adding the ability to set refresh: always
in an options object at a Pulumi.yaml level
to allow a user to be able to always refresh their derivative stacks by default
#8071
[codegen/go] - Fix generation of cyclic struct types. #8049
[codegen/nodejs] - Fix type literal generation by adding disambiguating parens; previously nested types such as arrays of unions and optionals generated type literals that were incorrectly parsed by TypeScript precedence rules.
NOTE for providers: using updated codegen may result in API changes that break existing working programs built against the older (incorrect) API declarations.
[auto/go] - Fix --target / --replace args #8109
[sdk/python] - Fix deprecation warning when using python 3.10 #8129
FAQs
Pulumi's Node.js SDK, forked by dmattia, meant to be merged back in
The npm package @dmattia/pulumi receives a total of 0 weekly downloads. As such, @dmattia/pulumi popularity was classified as not popular.
We found that @dmattia/pulumi demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.