
Research
/Security News
npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
@first-lego-league/clock
Advanced tools
Web based application showing the FLL match timer. Works in the latest versions of chrome, firefox and internet explorer
The clock creates to the following mhub messages (on the protected node)
Topic | Fired On | Data |
---|---|---|
clock:start | Fired when the countdown is starting to run | |
clock:stop | Fired when a countdown have stop in the middle | |
clock:end | Fired at the end of the countdown | |
clock:reload | Fired when the clock is reset the time | |
clock:time | Fired each second during the countdown | Seconds to end of the countdown |
In order to use the API, you first need to get an authenticity token. You can get this by sending an authentication request to the Identity Provider module (AKA IdP). It runs on the server computer, typically listening on port 2030.
Send a request: POST idp-endpoint/login?callbackUrl=url with the body { username: admin, password: your-admin-password }
You will receive a 304 Redirect with set-cookie header that contains the auth token. You can use that. Once you have the authenticity token, you send it as a header in each request you make.
The timer API has four actions:
When you want to publish to npm, run the command yarn publish
. First you will be asked to enter a new version to publish. Following that the build script will run the packing stage (prepack
).
Note: Publish from a version branch (e.g. v2.2.3) so that you can do a PR.
$ yarn publish
yarn publish v1.12.1
[1/4] Bumping version...
info Current version: 2.2.2
question New version: 2.2.3
info New version: 2.2.3
[2/4] Logging in...
[3/4] Publishing...
$ webpack --mode production --config webpack.prod.js
.....
success Published.
[4/4] Revoking token...
info Not revoking login token, specified via config file.
Done in 140.79s.
launcher
To include your update in the launcher
build, update the clock
version in launcher/dev-scripts/config-get.js
.
Warning: Warning:
Prior to version 1.9.0
, Yarn has a bug with using the .npmignore
file correctly. Therefore make sure your Yarn version is 1.9.0
or later. If not, either upgrade your yarn or use the command npm publish
instead.
FAQs
Clock for
We found that @first-lego-league/clock demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.