Security News
Weekly Downloads Now Available in npm Package Search Results
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
@eeacms/volto-addons-forest
Advanced tools
Volto add-on
Demo GIF
Create new volto project if you don't already have one:
$ npm install -g yo @plone/generator-volto
$ yo @plone/volto my-volto-project --addon @eeacms/volto-addon-template
$ cd my-volto-project
$ yarn add -W @eeacms/volto-addon-template
If you already have a volto project, just update package.json
:
"addons": [
"@eeacms/volto-addon-template"
],
"dependencies": {
"@eeacms/volto-addon-template": "^1.0.0"
}
Install new add-ons and restart Volto:
$ yarn
$ yarn start
Go to http://localhost:3000
Happy editing!
develop
to master
. The pull request status checks correlated to the branch and PR Jenkins jobs need to be processed successfully. 1 review from a github user with rights is mandatory.master
branch, which is protected from direct commits, only allowing pull request merge commits.continuous-integration/jenkins/branch
link goes to the Jenkins job execution webpage.eeacms/gitflow
docker image, specifically js-release.sh script. It uses the release-it
tool.package.json
. The new version must not be already present in the tags/releases of the repository, otherwise it will be automatically increased by the script. Any changes to the version will trigger a CHANGELOG.md
re-generation.CHANGELOG.md
file.You need to first install the release-it client.
npm install -g release-it
Release-it uses the configuration written in the .release-it.json
file located in the root of the repository.
Release-it is a tool that automates 4 important steps in the release process:
package.json
( increased from the current version in package.json
)CHANGELOG.md
automatic generation from commit messages ( grouped by releases )To configure the authentification, you need to export GITHUB_TOKEN for GitHub
export GITHUB_TOKEN=XXX-XXXXXXXXXXXXXXXXXXXXXX
To configure npm, you can use the npm login
command or use a configuration file with a TOKEN :
echo "//registry.npmjs.org/:_authToken=YYYYYYYYYYYYYYYYYYYYYYYYYYYYYY" > .npmrc
There are 3 yarn scripts that can be run to do the release
Automatically calculates and presents 3 beta versions - patch, minor and major for you to choose ( or Other for manual input).
? Select increment (next version):
❯ prepatch (0.1.1-beta.0)
preminor (0.2.0-beta.0)
premajor (1.0.0-beta.0)
Other, please specify...
Same as yarn release-beta
, but with premajor version pre-selected.
Generic command, does not automatically add the beta
to version, but you can still manually write it if you choose Other.
Do not use release-it tool on master branch, the commit on CHANGELOG.md file and the version increase in the package.json file can't be done without a PULL REQUEST.
Do not keep Pull Requests from develop to master branches open when you are doing beta releases from the develop branch. As long as a PR to master is open, an automatic script will run on every commit and will update both the version and the changelog to a production-ready state - ( MAJOR.MINOR.PATCH mandatory format for version).
See DEVELOP.md.
The Initial Owner of the Original Code is European Environment Agency (EEA). All Rights Reserved.
See LICENSE.md for details.
FAQs
Addons and functionalities used by Forest
We found that @eeacms/volto-addons-forest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.
Security News
A Stanford study reveals 9.5% of engineers contribute almost nothing, costing tech $90B annually, with remote work fueling the rise of "ghost engineers."
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.