
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@eeacms/volto-banner
Advanced tools
Volto add-on
A customizable banner to highlight to the user that the website is in demo, dev or staging state.
It is configurable through /controlpanel/banner
.
2.x.x
requires eea.banner Plone add-on to be installed on backend.Get the latest Docker images
docker pull plone
docker pull plone/volto
Start Plone backend
docker run -it --rm -p 8080:8080 -e SITE=Plone -e ADDONS="eea.banner" -e PROFILES="profile-eea.banner:default" plone
Go to http://localhost:3000
If you already have a volto project, just update package.json
:
"addons": [
"@eeacms/volto-banner"
],
"dependencies": {
"@eeacms/volto-banner": "^2.0.0"
}
If not, create one:
npm install -g yo @plone/generator-volto
yo @plone/volto my-volto-project --addon @eeacms/volto-banner
cd my-volto-project
Install new add-ons and start Volto:
yarn
yarn start
Go to http://localhost:3000
Login admin:admin
Go to Site Setup > Banner settings
and configure your banner
develop
to master
. The pull request status checks correlated to the branch and PR Jenkins jobs need to be processed successfully. 1 review from a github user with rights is mandatory.master
branch, which is protected from direct commits, only allowing pull request merge commits.continuous-integration/jenkins/branch
link goes to the Jenkins job execution webpage.eeacms/gitflow
docker image, specifically js-release.sh script. It uses the release-it
tool.package.json
. The new version must not be already present in the tags/releases of the repository, otherwise it will be automatically increased by the script. Any changes to the version will trigger a CHANGELOG.md
re-generation.CHANGELOG.md
file.You need to first install the release-it client.
npm install -g release-it
Release-it uses the configuration written in the .release-it.json
file located in the root of the repository.
Release-it is a tool that automates 4 important steps in the release process:
package.json
( increased from the current version in package.json
)CHANGELOG.md
automatic generation from commit messages ( grouped by releases )To configure the authentification, you need to export GITHUB_TOKEN for GitHub
export GITHUB_TOKEN=XXX-XXXXXXXXXXXXXXXXXXXXXX
To configure npm, you can use the npm login
command or use a configuration file with a TOKEN :
echo "//registry.npmjs.org/:_authToken=YYYYYYYYYYYYYYYYYYYYYYYYYYYYYY" > .npmrc
There are 3 yarn scripts that can be run to do the release
Automatically calculates and presents 3 beta versions - patch, minor and major for you to choose ( or Other for manual input).
? Select increment (next version):
❯ prepatch (0.1.1-beta.0)
preminor (0.2.0-beta.0)
premajor (1.0.0-beta.0)
Other, please specify...
Same as yarn release-beta
, but with premajor version pre-selected.
Generic command, does not automatically add the beta
to version, but you can still manually write it if you choose Other.
Do not use release-it tool on master branch, the commit on CHANGELOG.md file and the version increase in the package.json file can't be done without a PULL REQUEST.
Do not keep Pull Requests from develop to master branches open when you are doing beta releases from the develop branch. As long as a PR to master is open, an automatic script will run on every commit and will update both the version and the changelog to a production-ready state - ( MAJOR.MINOR.PATCH mandatory format for version).
See DEVELOP.md.
The Initial Owner of the Original Code is European Environment Agency (EEA). All Rights Reserved.
See LICENSE.md for details.
2.0.0 - 16 February 2022
2522d5e
]9b862c6
]1a6d246
]572b4d7
]8a8b9a9
]9b3058c
]fbb32d4
]FAQs
@eeacms/volto-banner: Volto add-on
The npm package @eeacms/volto-banner receives a total of 92 weekly downloads. As such, @eeacms/volto-banner popularity was classified as not popular.
We found that @eeacms/volto-banner demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.