
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@edenjs/framework
Advanced tools
Awesome isomorphic NodeJS skeleton for structured applications. Just have a look at the "bundles" that make up an EdenJS application.
These instructions will get a copy of the project up and running on your local machine.
See deployment for notes on how to deploy the project.
Required software to install and run EdenJS:
// Deploy EdenJS
git init; git remote add origin https://github.com/eden-js/eden.git; git pull;
// Test EdenJS with NPM
npm test;
// Install (for production)
gulp install;
// Run in production
node app;
A basic tutorial on how to get started with EdenJS is available: TUTORIAL.md
We use SemVer for versioning.
See also the list of contributors who participated in this project.
This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
Web Application Framework built on Express.js, Redis and RiotJS
The npm package @edenjs/framework receives a total of 6 weekly downloads. As such, @edenjs/framework popularity was classified as not popular.
We found that @edenjs/framework demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.