Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@form8ion/javascript-core
Advanced tools
core logic for form8ion tools related to JavaScript, like javascript-scaffolder and lift-javascript
core logic for form8ion tools related to JavaScript, like javascript-scaffolder and lift-javascript
$ npm install @form8ion/javascript-core --save-prod
import {scaffoldUnitTesting, scaffoldChoice, installDependencies, PROD_DEPENDENCY_TYPE} from '@form8ion/javascript-core';
(async () => {
await scaffoldUnitTesting({
projectRoot: process.cwd(),
frameworks: {
Mocha: {scaffolder: () => undefined},
Jest: {scaffolder: () => undefined}
},
visibility: 'Public',
vcs: {host: 'GitHub', owner: 'foo', name: 'bar'}
});
await scaffoldChoice(
{foo: {scaffolder: options => options}},
'foo',
{bar: 'baz'}
);
await installDependencies(['foo', 'bar'], PROD_DEPENDENCY_TYPE);
})();
scaffoldChoice
A generic function that executes the scaffolder
function from a provided map
of options based on the chosen option name.
Takes three unnamed arguments:
choices
object (required)scaffolder
: function (required) scaffolds the choice optionschoice
string (required)Name of the choice. SHOULD match a key from the choices
object.
options
object (optional)options object to be passed as the only argument to the chosen scaffolder
scaffoldUnitTesting
Scaffolder for enabling unit-testing in a project with the ability to choose a desired framework from provided options.
Takes a single options object as an argument, containing:
projectRoot
string (required)path to the root of the project
frameworks
object (required)A choices
object for defining
unit-testing framework options
decisions
object (optional)Answers for prompt questions so that the prompt is skipped at execution time
visibility
string (required)visibility of the project (Public
or Private
)
vcs
object (required)host
string (required)
VCS hosting serviceowner
string (required)
account name on the host service for the repositoryname
string (required)
repository nameunitTestFrameworksSchema
joi schema for the choices required for the unit-testing scaffolder
installDependencies
A function that installs the provided package dependencies.
Takes two unnamed arguments:
dependencies
list of strings (required)The list of package names to be installed.
dependenciesType
string (required)Defines if the provided list of package names should be installed as prod or
dev dependencies. If "dev" is provided, the list will be installed with the
--save-exact
flag.
Constants to define the valid options for dependenciesType
PROD_DEPENDENCY_TYPE
DEV_DEPENDENCY_TYPE
questionNames
Constants defining the question names for the prompts implemented in this package
$ nvm install
$ npm install
$ npm test
FAQs
core logic for form8ion tools related to JavaScript, like javascript-scaffolder and lift-javascript
The npm package @form8ion/javascript-core receives a total of 3,614 weekly downloads. As such, @form8ion/javascript-core popularity was classified as popular.
We found that @form8ion/javascript-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.