
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@electron-delta/builder
Advanced tools
True delta updates for electronjs apps. It reduces the bandwidth usage by 90%. Users download only the delta. It uses binary diffing (HDiffPatch
library) to generate the delta.
electron-builder
to build the app.Windows
os is supported. MacOS support is arriving soon.nsis
or nsis-web
npm install @electron-delta/builder -D
Create a file name called .electron-delta.js
in the root of the project.
In the electron-builder
config, mention the above file as afterAllArtifactBuild
hook.
"build": {
"appId": "com.electron.sample-app",
"afterAllArtifactBuild": ".electron-delta.js",
"win": {
"target": ["nsis"],
"publish": ["github"]
},
"nsis": {
"oneClick": true,
"perMachine": false,
}
}
Paste the following code in the .electron-delta.js
file. It will be executed after the app is built.
// .electron-delta.js
const DeltaBuilder = require("@electron-delta/builder");
const path = require("path");
const options = {
productIconPath: path.join(__dirname, "icon.ico"),
productName: "electron-sample-app",
getPreviousReleases: async () => {
return [
{
version: '0.0.12',
url: 'https://github.com/electron-delta/electron-sample-app/releases/download/v0.0.12/electron-sample-app-0.0.12.exe'
},
{
version: '0.0.11',
url: 'https://github.com/electron-delta/electron-sample-app/releases/download/v0.0.11/electron-sample-app-0.0.11.exe'
},
{
version: '0.0.9',
url: 'https://github.com/electron-delta/electron-sample-app/releases/download/v0.0.9/electron-sample-app-0.0.9.exe'
}
];
},
sign: async (filePath) => {
// sign each delta executable
},
};
exports.default = async function (context) {
const deltaInstallerFiles = await DeltaBuilder.build({
context,
options,
});
return deltaInstallerFiles;
};
options
productIconPath
: (required) Path to the icon file. The icon file must be a .ico file.productName
: (required) Name of the product.getPreviousReleases
: (required) Function to get the previous releases. It must return an array of objects. Each object must have version
and url
properties.sign
: (required) Function to sign the delta executable.cache
: (optional) Path to the cache directory. If not specified, the default cache directory will be used. The default cache directory is ~/.electron-delta/
.processName
: (optional) Name of the process. If different from the product name.latestVersion
: (optional) Latest version of the product. If not specified, the latest version will be fetched process.env.npm_package_version
.FAQs
True delta updates for electronjs.
The npm package @electron-delta/builder receives a total of 17 weekly downloads. As such, @electron-delta/builder popularity was classified as not popular.
We found that @electron-delta/builder demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.