Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@google/aside
Advanced tools
Apps Script in IDE (ASIDE) supports modern, robust and scalable Apps Script development by providing a framework for a local coding environment capable of formatting, linting, testing and much more.
Here are the main features:
TypeScript
Write your code in TypeScript. It will be automatically compiled and bundled when deploying
Formatting / Linting
Leverage the power of ESLint and Prettier to enforce a unique coding style amongst collaborators
Testing
Use Jest to test your code before deploying
Multiple Environments
Seemlessly switch between dev
and prod
environments to push your code to
The simplest way to get started is:
npx @google/aside init
After running the init
command above, ASIDE will go ahead and do the following:
Add configuration files
E.g. for ESLint, Prettier, Jest, ...
Set convenience scripts in package.json
Those scripts include: lint
, build
and deploy
, among others
Install necessary dependencies
Everything required for formatting, linting, testing, etc. will be installed automatically
Set up clasp
ASIDE is using clasp to pull and push code from and to Apps Script
(Optionally) Create an Angular Material UI
ASIDE will run the necessary commands to create an Angular application with Angular Material components, if the option is chosen
You can provide the init
command with some convenience options:
--yes
/ -y
Answer 'yes' to all prompts
--no
/ -n
Answer 'no' to all prompts
--title
/ -t
Set project title without being asked for it
--script-dev
Set Script ID for dev environment without being asked for it
--script-prod
Set Script ID for production environment without being asked for it
While bundling generally resolves all export
s and import
s it keeps export
s in the entrypoint causing clasp
to fail pushing. This can be an issue for example if you're trying to export functions from index.ts
for testing.
The recommended approach is to use the entrypoint (index.ts
) only to expose global functions to Apps Script while importing all business logic from separate modules.
Bundling includes treeshaking of unused files to keep the bundle size as small as possible. If any of your modules contain only global functions with no import-path leading to the entrypoint (e.g. to be called from the menu), those would not be included in the bundle.
To avoid this, you can use a side-effect import.
import './path/to/module';
This will ensure that Rollup will not remove it from the bundle.
This is not an officially supported Google product.
FAQs
Apps Script IDE framework
The npm package @google/aside receives a total of 20 weekly downloads. As such, @google/aside popularity was classified as not popular.
We found that @google/aside demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.